Home > Documentation > Verifying ProcessOne Downloads Integrity

Verifying ProcessOne Downloads Integrity

Verifying checksum

Integrity of files downloaded from Process-one website can be verified with checksum information. To validate your download:

  1. Download both the file.ext and the file.ext.md5
  2. Type the following command: md5sum -c file.ext.md5
Note: Replace file.ext by the actual name of the downloaded file.

Verifying signature

The code distributed by Process-one is signed. To check the signature, you first need to have GNUPG installed and configured on your system. Then, you can go through the following steps:

  1. Import Process-one public keys into your keyring with the following command:
    wget -qO - http://www.process-one.net/downloads/KEYS | gpg --import
    This has to be done only once.
  2. Download the file.ext.asc along with your file.ext.
  3. Check the Process-one signature with the following command: gpg --verify file.tar.gz.asc