Verification instructions#
To find instructions on how to verify the integrity of the file you have downloaded, navigate to the respective section that outlines the steps needed for that specific file.
Concordium Desktop Wallet#
Linux#
AppImage#
Verify checksum of download
In a terminal:
Navigate to the download.
Then paste the first line of the following block into the terminal.
Verify that the output matches the second line in the block.
$sha256sum concordium-desktop-wallet-1.7.4.AppImage
87055b6f6dc19c4d22460e87697801021606e4248bed1908f9bc808776cd0bec
Verify download with signature
To verify that the downloaded file is an official Concordium release, you can verify that the file is signed by Concordium. To do this, you need a signature of the release and a public key.
With the signature, the public key, and the downloaded file all in the same directory, execute the following steps to verify that the file has been signed by Concordium.
In a terminal:
Navigate to the directory containing the assets needed to verify.
Then paste the first line of the following block into the terminal
The command outputs Signature Verified Successfully as a result, as inidicated by the second line in the block.
$openssl pkeyutl -verify -pubin -inkey concordium-desktop-wallet-pubkey.pem -rawin -in concordium-desktop-wallet-1.7.4.AppImage -sigfile concordium-desktop-wallet-1.7.4.AppImage.sig
Signature Verified Successfully
Note that this only works for openssl version 3.0.0 and up.
Debian package#
Verify checksum of download
In a terminal:
Navigate to the download.
Then paste the first line of the following block into the terminal.
Verify that the output matches the second line in the block.
$sha256sum concordium-desktop-wallet-1.7.4.deb
2860af2631e03643a101380ba02808ae88f64e1dc82ab450dee43a0440ccff36
Verify download with signature
To verify that the downloaded file is an official Concordium release, you can verify that the file is signed by Concordium. To do this, you need a signature of the release and a public key.
With the signature, the public key, and the downloaded file all in the same directory, execute the following steps to verify that the file has been signed by Concordium.
In a terminal:
Navigate to the directory containing the assets needed to verify.
Then paste the first line of the following block into the terminal
The command outputs Signature Verified Successfully as a result, as inidicated by the second line in the block.
$openssl pkeyutl -verify -pubin -inkey concordium-desktop-wallet-pubkey.pem -rawin -in concordium-desktop-wallet-1.7.4.deb -sigfile concordium-desktop-wallet-1.7.4.deb.sig
Signature Verified Successfully
Note that this only works for openssl version 3.0.0 and up.
RPM#
Verify checksum of download
In a terminal:
Navigate to the download.
Then paste the first line of the following block into the terminal.
Verify that the output matches the second line in the block.
$sha256sum concordium-desktop-wallet-1.7.4.rpm
bf50e3777ddaefe865b3765401e23da7ab39530a109c16b75bc3871127eae83c
Verify download with signature
To verify that the downloaded file is an official Concordium release, you can verify that the file is signed by Concordium. To do this, you need a signature of the release and a public key.
With the signature, the public key, and the downloaded file all in the same directory, execute the following steps to verify that the file has been signed by Concordium.
In a terminal:
Navigate to the directory containing the assets needed to verify.
Then paste the first line of the following block into the terminal
The command outputs Signature Verified Successfully as a result, as inidicated by the second line in the block.
$openssl pkeyutl -verify -pubin -inkey concordium-desktop-wallet-pubkey.pem -rawin -in concordium-desktop-wallet-1.7.4.rpm -sigfile concordium-desktop-wallet-1.7.4.rpm.sig
Signature Verified Successfully
Note that this only works for openssl version 3.0.0 and up.
Automatic updates#
When the desktop wallet updates itself, it performs the necessary steps to verify both the checksum and signature of the downloaded update. If verification is unsuccessful, the update is rejected.
Concordium Client#
Linux#
Verify checksum of download
In a terminal:
Navigate to the download.
Then paste the first line of the following block into the terminal.
Verify that the output matches the second line in the block.
$sha256sum concordium-client_7.0.1-0
1fb19a983281fbfd3585849f7c9e93051389214460dc2d917c87fc6533c38958
Cargo Concordium#
Linux#
Verify checksum of download
In a terminal:
Navigate to the download.
Then paste the first line of the following block into the terminal.
Verify that the output matches the second line in the block.
$sha256sum cargo-concordium_2.8.0
ea3f603e2a921181cdf323604066444378a955c55e82b206a7d169bf636fa75d
Node Debian package#
Verify checksum of download
In a terminal:
Navigate to the download.
Then paste the first line of the following block into the terminal.
Verify that the output matches the second line in the block.
$sha256sum concordium-mainnet-node_7.0.5-0_amd64.deb
42bb05409561bc30917d87a3479d3b76d9a3f17fa46bb2aee7475e7f7fa1df5d
Mainnet genesis block#
Verify checksum of download
In a terminal:
Navigate to the download.
Then paste the first line of the following block into the terminal.
Verify that the output matches the second line in the block.
Windows
$Get-FileHash genesis.dat -Algorithm SHA256
5fe6a62824d5b0dba6143243e90987ddf3e15cca079f21992de04d078d9ea6dc
MacOS
$shasum -a 256 genesis.dat
5fe6a62824d5b0dba6143243e90987ddf3e15cca079f21992de04d078d9ea6dc
Linux
$sha256sum genesis.dat
5fe6a62824d5b0dba6143243e90987ddf3e15cca079f21992de04d078d9ea6dc
