> ## Content Index
> Fetch the complete content index at: https://www.process-one.net/llms.txt
> Use this file to discover other available public pages before exploring further.

# How to verify ProcessOne downloads integrity
- URL: https://www.process-one.net/blog/verifying-process-one-downloads-integrity/
- Published: 2009-12-31T23:00:00.000Z
- Updated: 2024-10-10T15:23:22.000Z
- Author: Mickaël Rémond

Integrity of files downloaded from ProcessOne website can be verified with checksum information.  
To validate your download:

1. Download both the `file.ext` and the `file.ext.sum`.

On Linux, type the following command:

```bash
sha256sum -c file.ext.sum

```

On macOS, type the following command:

```bash
openssl sha256 file.ext
tail -f file.ext.sum

```

Compare the first hash with the contents of the `file.ext.sum` file.

**Note*: Replace `file.ext` by the actual name of the downloaded file.*

## Verifying signature

The code distributed by ProcessOne is signed. To check the signature, you first need to have GNUPG installed and configured on your system. Then, you can go through the following steps:

1. Download the `file.ext.asc` along with your `file.ext`.

Check the ProcessOne signature with the following command:

```
gpg --verify file.tar.gz.asc`

```

Successful verification contains the text `Good signature from Process-one`.

Import ProcessOne public keys into your keyring with the following command. This has to be done only once:

```
wget -qO - https://www.process-one.net/downloads/KEYS | gpg --import

```