Verification instructions#
To find instructions on how to verify the integrity of the file you have downloaded, navigate to the respective section that outlines the steps needed for that specific file.
Concordium Desktop Wallet#
Linux#
AppImage#
Verify checksum of download
In a terminal:
Navigate to the download.
Then paste the first line of the following block into the terminal.
Verify that the output matches the second line in the block.
$sha256sum concordium-desktop-wallet-1.7.3.AppImage
1b0c3c56e17bf765e0a49aff928c63a7b16c2296b46859a8e8865577ba25e954
Verify download with signature
To verify that the downloaded file is an official Concordium release, you can verify that the file is signed by Concordium. To do this, you need a signature of the release and a public key.
With the signature, the public key, and the downloaded file all in the same directory, execute the following steps to verify that the file has been signed by Concordium.
In a terminal:
Navigate to the directory containing the assets needed to verify.
Then paste the first line of the following block into the terminal
The command outputs Signature Verified Successfully as a result, as inidicated by the second line in the block.
$openssl pkeyutl -verify -pubin -inkey concordium-desktop-wallet-pubkey.pem -rawin -in concordium-desktop-wallet-1.7.3.AppImage -sigfile concordium-desktop-wallet-1.7.3.AppImage.sig
Signature Verified Successfully
Note that this only works for openssl version 3.0.0 and up.
Debian package#
Verify checksum of download
In a terminal:
Navigate to the download.
Then paste the first line of the following block into the terminal.
Verify that the output matches the second line in the block.
$sha256sum concordium-desktop-wallet-1.7.3.deb
086dd2e1f0451d81583a3b09b8d176432f5d8f15ee730316240b0adb13f212af
Verify download with signature
To verify that the downloaded file is an official Concordium release, you can verify that the file is signed by Concordium. To do this, you need a signature of the release and a public key.
With the signature, the public key, and the downloaded file all in the same directory, execute the following steps to verify that the file has been signed by Concordium.
In a terminal:
Navigate to the directory containing the assets needed to verify.
Then paste the first line of the following block into the terminal
The command outputs Signature Verified Successfully as a result, as inidicated by the second line in the block.
$openssl pkeyutl -verify -pubin -inkey concordium-desktop-wallet-pubkey.pem -rawin -in concordium-desktop-wallet-1.7.3.deb -sigfile concordium-desktop-wallet-1.7.3.deb.sig
Signature Verified Successfully
Note that this only works for openssl version 3.0.0 and up.
RPM#
Verify checksum of download
In a terminal:
Navigate to the download.
Then paste the first line of the following block into the terminal.
Verify that the output matches the second line in the block.
$sha256sum concordium-desktop-wallet-1.7.3.rpm
b175c6a01614bb93305d5c49e8c98a1aecc4a495013b88e46a12cdf5499c7874
Verify download with signature
To verify that the downloaded file is an official Concordium release, you can verify that the file is signed by Concordium. To do this, you need a signature of the release and a public key.
With the signature, the public key, and the downloaded file all in the same directory, execute the following steps to verify that the file has been signed by Concordium.
In a terminal:
Navigate to the directory containing the assets needed to verify.
Then paste the first line of the following block into the terminal
The command outputs Signature Verified Successfully as a result, as inidicated by the second line in the block.
$openssl pkeyutl -verify -pubin -inkey concordium-desktop-wallet-pubkey.pem -rawin -in concordium-desktop-wallet-1.7.3.rpm -sigfile concordium-desktop-wallet-1.7.3.rpm.sig
Signature Verified Successfully
Note that this only works for openssl version 3.0.0 and up.
Automatic updates#
When the desktop wallet updates itself, it performs the necessary steps to verify both the checksum and signature of the downloaded update. If verification is unsuccessful, the update is rejected.
Concordium Client#
Linux#
Verify checksum of download
In a terminal:
Navigate to the download.
Then paste the first line of the following block into the terminal.
Verify that the output matches the second line in the block.
$sha256sum concordium-client_6.2.1-0
20b5b0502c34743d3d30a269b58e47b66982fdb4fd11e82fc510f9e01ba2b161
Linux#
Verify checksum of download
In a terminal:
Navigate to the download.
Then paste the first line of the following block into the terminal.
Verify that the output matches the second line in the block.
$sha256sum cargo-concordium_2.8.0
ea3f603e2a921181cdf323604066444378a955c55e82b206a7d169bf636fa75d
Node Debian package#
Verify checksum of download
In a terminal:
Navigate to the download.
Then paste the first line of the following block into the terminal.
Verify that the output matches the second line in the block.
$sha256sum concordium-mainnet-node_6.3.0-0_amd64.deb
0e400051bc1626c69474a9cdf58f43b62dddd502edd94a1b563701e2eedd924b
Mainnet genesis block#
Verify checksum of download
In a terminal:
Navigate to the download.
Then paste the first line of the following block into the terminal.
Verify that the output matches the second line in the block.
Windows
$Get-FileHash genesis.dat -Algorithm SHA256
5fe6a62824d5b0dba6143243e90987ddf3e15cca079f21992de04d078d9ea6dc
MacOS
$shasum -a 256 genesis.dat
5fe6a62824d5b0dba6143243e90987ddf3e15cca079f21992de04d078d9ea6dc
Linux
$sha256sum genesis.dat
5fe6a62824d5b0dba6143243e90987ddf3e15cca079f21992de04d078d9ea6dc
