Verification instructions#
To find instructions on how to verify the integrity of the file you have downloaded, navigate to the respective section that outlines the steps needed for that specific file.
Concordium Desktop Wallet#
Linux#
AppImage#
Verify checksum of download
In a terminal:
Navigate to the download.
Then paste the first line of the following block into the terminal.
Verify that the output matches the second line in the block.
$sha256sum concordium-desktop-wallet-1.9.6.AppImage
dd673f98c7d77de8cb966dd717495f5f77da5da2529101fc089323b6e65a1a8e
Verify download with signature
To verify that the downloaded file is an official Concordium release, you can verify that the file is signed by Concordium. To do this, you need a signature of the release and a public key.
With the signature, the public key, and the downloaded file all in the same directory, execute the following steps to verify that the file has been signed by Concordium.
In a terminal:
Navigate to the directory containing the assets needed to verify.
Then paste the first line of the following block into the terminal
The command outputs Signature Verified Successfully as a result, as inidicated by the second line in the block.
$openssl pkeyutl -verify -pubin -inkey concordium-desktop-wallet-pubkey.pem -rawin -in concordium-desktop-wallet-1.9.6.AppImage -sigfile concordium-desktop-wallet-1.9.6.AppImage.sig
Signature Verified Successfully
Note that this only works for openssl version 3.0.0 and up.
Debian package#
Verify checksum of download
In a terminal:
Navigate to the download.
Then paste the first line of the following block into the terminal.
Verify that the output matches the second line in the block.
$sha256sum concordium-desktop-wallet-1.9.6.deb
95b3cdbec9b28c17a92cdfa1e95f213d37a82b8aff3783bfb024f39a37c275d7
Verify download with signature
To verify that the downloaded file is an official Concordium release, you can verify that the file is signed by Concordium. To do this, you need a signature of the release and a public key.
With the signature, the public key, and the downloaded file all in the same directory, execute the following steps to verify that the file has been signed by Concordium.
In a terminal:
Navigate to the directory containing the assets needed to verify.
Then paste the first line of the following block into the terminal
The command outputs Signature Verified Successfully as a result, as inidicated by the second line in the block.
$openssl pkeyutl -verify -pubin -inkey concordium-desktop-wallet-pubkey.pem -rawin -in concordium-desktop-wallet-1.9.6.deb -sigfile concordium-desktop-wallet-1.9.6.deb.sig
Signature Verified Successfully
Note that this only works for openssl version 3.0.0 and up.
RPM#
Verify checksum of download
In a terminal:
Navigate to the download.
Then paste the first line of the following block into the terminal.
Verify that the output matches the second line in the block.
$sha256sum concordium-desktop-wallet-1.9.6.rpm
34d5e8e1dd79753aa919a57d83f06431f7fb089984e58ab92c81dd634bc3c458
Verify download with signature
To verify that the downloaded file is an official Concordium release, you can verify that the file is signed by Concordium. To do this, you need a signature of the release and a public key.
With the signature, the public key, and the downloaded file all in the same directory, execute the following steps to verify that the file has been signed by Concordium.
In a terminal:
Navigate to the directory containing the assets needed to verify.
Then paste the first line of the following block into the terminal
The command outputs Signature Verified Successfully as a result, as inidicated by the second line in the block.
$openssl pkeyutl -verify -pubin -inkey concordium-desktop-wallet-pubkey.pem -rawin -in concordium-desktop-wallet-1.9.6.rpm -sigfile concordium-desktop-wallet-1.9.6.rpm.sig
Signature Verified Successfully
Note that this only works for openssl version 3.0.0 and up.
Automatic updates#
When the desktop wallet updates itself, it performs the necessary steps to verify both the checksum and signature of the downloaded update. If verification is unsuccessful, the update is rejected.
Concordium Client#
Linux#
Verify checksum of download
In a terminal:
Navigate to the download.
Then paste the first line of the following block into the terminal.
Verify that the output matches the second line in the block.
$sha256sum concordium-client-linux
9179a950cf4b4526f8202712037de18b97fc2fe596f2255585cfcd3b2bf3cf94
Genesis Creator Tool#
Linux#
Verify checksum of download
In a terminal:
Navigate to the download.
Then paste the first line of the following block into the terminal.
Verify that the output matches the second line in the block.
$sha256sum genesis-creator-linux-amd64
5bc6b7772597b3167525dcd34c5bf767716ea97f30110f18966d209391521ff3
Cargo Concordium#
Linux#
Verify checksum of download
In a terminal:
Navigate to the download.
Then paste the first line of the following block into the terminal.
Verify that the output matches the second line in the block.
$sha256sum cargo-concordium_2.8.0
ea3f603e2a921181cdf323604066444378a955c55e82b206a7d169bf636fa75d
Node Debian package#
Verify checksum of download
In a terminal:
Navigate to the download.
Then paste the first line of the following block into the terminal.
Verify that the output matches the second line in the block.
$sha256sum concordium-mainnet-node_10.0.12-6_amd64.deb
f588975d43e1f8a34fdcf1a1b7fdfcc64767fdd3a666844908a919b025559852
Mainnet genesis block#
Verify checksum of download
In a terminal:
Navigate to the download.
Then paste the first line of the following block into the terminal.
Verify that the output matches the second line in the block.
Windows
$Get-FileHash genesis.dat -Algorithm SHA256
5fe6a62824d5b0dba6143243e90987ddf3e15cca079f21992de04d078d9ea6dc
macOS
$shasum -a 256 genesis.dat
5fe6a62824d5b0dba6143243e90987ddf3e15cca079f21992de04d078d9ea6dc
Linux
$sha256sum genesis.dat
5fe6a62824d5b0dba6143243e90987ddf3e15cca079f21992de04d078d9ea6dc
