To check the download, I've been told to compare the downloaded OS's SHA text file to the OS manufacturer's (armbian) website for their SHA. I asked this question previously but can not find the thread now. 

 

I'm using orangepiplus2e. 

 

Thank you. 

Edited September 17, 20197 yr by bvv

1 hour ago, bvv said:

To check the download

https://docs.armbian.com/User-Guide_Getting-Started/#how-to-check-download-authenticity

hi igor, i'm bvv. wasn't able to log in so i had to create a new login.

 

1... I went to the site, getting the following error message: (ironically, when i tried this on my ubuntu computer, using the same network, it did work.

 

UBUNTU: (gpg --keyserver ha.pool.sks-keyservers.net --recv-key DF00FAF1C577104B50BF1D0093D6889F9F0E78D5
gpg: key 93D6889F9F0E78D5: 2 signatures not checked due to missing keys
gpg: key 93D6889F9F0E78D5: "Igor Pecovnik <igor@armbian.com>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1)

 

DEBIAN10:

# download public key from the database:
gpg --keyserver ha.pool.sks-keyservers.net --recv-key DF00FAF1C577104B50BF1D0093D6889F9F0E78D5

 "gpg: keyserver received failed: Server indicated a failure."

 

-----------------------------------

 

2... for "gpg --verify Armbian_5.18_Armada_Debian_jessie_3.10.94.img.asc"
UBUNTU:

 gpg --verify Armbian_5.93_Orangepiplus2e_Debian_buster_next_4.19.64_desktop.7z
gpg: no valid OpenPGP data found.
gpg: the signature could not be verified.
Please remember that the signature file (.sig or .asc)
should be the first file given on the command line.

 

DEBIAN: didnt' try it yet

 

> I'm assuming that i put in my armbian image name: (Armbian_5.93_Orangepiplus2e_Debian_buster__next_4.19.64_desktop.7z) instead of the "5.18" one that you have listed in #1?

 

Thank you.

Edited September 27, 20197 yr by qrty6