From e5ac1666fa94b35cc04eaef81620e1faa8acc94b Mon Sep 17 00:00:00 2001 From: Ad Schellevis Date: Tue, 13 Feb 2024 10:27:51 +0100 Subject: [PATCH] install: add warning about the need to uncompress the image before verify (as introduced in https://github.com/opnsense/docs/commit/6950921b56bc49f9fdeecf9ed80414fc44675e50) --- source/manual/install.rst | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/source/manual/install.rst b/source/manual/install.rst index e98e9293..d503e582 100644 --- a/source/manual/install.rst +++ b/source/manual/install.rst @@ -220,6 +220,12 @@ If checksums match continue with the verification commands. openssl dgst -sha256 -verify OPNsense-.pub -signature /tmp/image.sig OPNsense-. +.. Warning:: + + Make sure to unpack the image using :code:`bunzip2` before verifying. Our signatures are generated before compressing them + (as of OPNsense version 24.1) + + If the output of the second command is “**Verified OK**”, your image file was verified successfully, and its safe to install from it. Any other outputs, and you may need to check your commands for errors, or the image file may have been compromised.