From 38e37a0e45e680248413e364a81091edd096ce27 Mon Sep 17 00:00:00 2001 From: Kristal Dale Date: Fri, 14 Sep 2018 14:56:11 -0700 Subject: [PATCH 1/2] Update validation steps to reflect updated process: - remove leading './' for step 4 of Image content validation - remove important note for step 4 of Image content validation - correct file name for step 1 of Update content validation from Manifest.sig to Manifest.MoM.sig. Signed-off-by: Kristal Dale --- .../guides/maintenance/validate-signatures.rst | 12 +++--------- 1 file changed, 3 insertions(+), 9 deletions(-) diff --git a/source/clear-linux/guides/maintenance/validate-signatures.rst b/source/clear-linux/guides/maintenance/validate-signatures.rst index 1001369a..126f67d0 100644 --- a/source/clear-linux/guides/maintenance/validate-signatures.rst +++ b/source/clear-linux/guides/maintenance/validate-signatures.rst @@ -45,17 +45,11 @@ used for illustrative purposes. You may use any image of |CL| you choose. 4b0ca67300727477913c331ff124928a98bcf2fb12c011a855f17cd73137a890 ClearLinuxRoot.pem -#. Generate the SHA512 sum of the image and save it to a file. +#. Generate the SHA512 sum of the image and save it to a filex. .. code-block:: console - sha512sum ./clear-$(curl https://download.clearlinux.org/latest)-installer.img.xz > sha512sum.out - - .. important:: - - The ``./`` in the file name must be included because it is part of the - SHA512 sum of the image. Without it, the validation of the signature - of the image will fail. + sha512sum clear-$(curl https://download.clearlinux.org/latest)-installer.img.xz > sha512sum.out #. Ensure the signature of the SHA512 sum of the image was created using the Clear Linux certificate. This validates the image is trusted and it has not @@ -84,7 +78,7 @@ these steps manually when performing a ``swupd update``. # MoM curl -O https://download.clearlinux.org/update/$(curl https://download.clearlinux.org/latest)/Manifest.MoM # Signature of MoM - curl -O https://download.clearlinux.org/update/$(curl https://download.clearlinux.org/latest)/Manifest.sig + curl -O https://download.clearlinux.org/update/$(curl https://download.clearlinux.org/latest)/Manifest.MoM.sig # Swupd certificate curl -O https://download.clearlinux.org/releases/$(curl https://download.clearlinux.org/latest)/clear/Swupd_Root.pem From c1878b35d42ee178476084355420d18a6fcd2e20 Mon Sep 17 00:00:00 2001 From: Kristal Dale Date: Fri, 14 Sep 2018 15:06:41 -0700 Subject: [PATCH 2/2] Corrected minor typo. Signed-off-by: Kristal Dale --- source/clear-linux/guides/maintenance/validate-signatures.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/source/clear-linux/guides/maintenance/validate-signatures.rst b/source/clear-linux/guides/maintenance/validate-signatures.rst index 126f67d0..1a99afc6 100644 --- a/source/clear-linux/guides/maintenance/validate-signatures.rst +++ b/source/clear-linux/guides/maintenance/validate-signatures.rst @@ -45,7 +45,7 @@ used for illustrative purposes. You may use any image of |CL| you choose. 4b0ca67300727477913c331ff124928a98bcf2fb12c011a855f17cd73137a890 ClearLinuxRoot.pem -#. Generate the SHA512 sum of the image and save it to a filex. +#. Generate the SHA512 sum of the image and save it to a file. .. code-block:: console