[qubes-users] How to verify Qubes
Hello community, first i want say, that iam a new member of this google-group and i want greet all. :) Iam a newbie of Qubes(Linux) and i use Windows 10 at time. Today I downloaded the current ISO image from the main page. Since I'm not so good with Linux in general, I turn to you. I downloaded the Qubes master signing key and try to verify it. Since I use Windows 10, I have also downloaded the program GPGEX. I open the program Cleopatra and click on the field "import". The tool gives me the hint that the certificate must first be authenticated and I have to create my own PGP certificate to verify others. After the mentioned configuration I get a key. Is this the Qubes key? How can I tell that this is the right key? For example, when I click the Decrypt / Verify tab in Kleopatra, I get the error message that the key contains certificates and can not be decrypted. When I enter the commands from the Qubes page into the Windows command prompt, I get the error message no such file... What am I doing wrong? I hope my question is not ridiculous and someone can help me. Previously, I never dealt with PGP and the like. I would be very happy about many answers. Thanks in advance -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/18d035ef-37eb-45c5-afa5-284f004d9f4a%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to verify Qubes
On 04/13/2018 11:21 AM, myblackcatisb...@gmail.com wrote: Hello community, first i want say, that iam a new member of this google-group and i want greet all. :) Iam a newbie of Qubes(Linux) and i use Windows 10 at time. Today I downloaded the current ISO image from the main page. Since I'm not so good with Linux in general, I turn to you. I downloaded the Qubes master signing key and try to verify it. Since I use Windows 10, I have also downloaded the program GPGEX. I open the program Cleopatra and click on the field "import". The tool gives me the hint that the certificate must first be authenticated and I have to create my own PGP certificate to verify others. After the mentioned configuration I get a key. Is this the Qubes key? How can I tell that this is the right key? For example, when I click the Decrypt / Verify tab in Kleopatra, I get the error message that the key contains certificates and can not be decrypted. When I enter the commands from the Qubes page into the Windows command prompt, I get the error message no such file... What am I doing wrong? I hope my question is not ridiculous and someone can help me. Previously, I never dealt with PGP and the like. I would be very happy about many answers. Thanks in advance You need the Qubes 4 Signing key in addition to the master key and the signature. If you don't mind using the shell, I posted a shortened verification howto here: https://groups.google.com/d/msgid/qubes-users/f27a5258-419a-6b18-cb4f-a424746b8e34%40posteo.net -- Chris Laprise, tas...@posteo.net https://github.com/tasket https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/ca84de00-645e-e26a-356e-f1de4d50d55d%40posteo.net. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] How to verify Qubes
Hi, Try using this guide to verify the checksum. https://bhoover.com/how-to-verify-checksum-windows/ On 04/13/2018 05:21 PM, myblackcatisb...@gmail.com wrote: > Hello community, > > first i want say, that iam a new member of this google-group and i want greet > all. :) > > Iam a newbie of Qubes(Linux) and i use Windows 10 at time. > > Today I downloaded the current ISO image from the main page. Since I'm not so > good with Linux in general, I turn to you. > > I downloaded the Qubes master signing key and try to verify it. > > Since I use Windows 10, I have also downloaded the program GPGEX. I open the > program Cleopatra and click on the field "import". The tool gives me the hint > that the certificate must first be authenticated and I have to create my own > PGP certificate to verify others. After the mentioned configuration I get a > key. Is this the Qubes key? > How can I tell that this is the right key? > > For example, when I click the Decrypt / Verify tab in Kleopatra, I get the > error message that the key contains certificates and can not be decrypted. > > When I enter the commands from the Qubes page into the Windows command > prompt, I get the error message no such file... > > What am I doing wrong? > > I hope my question is not ridiculous and someone can help me. > > Previously, I never dealt with PGP and the like. > I would be very happy about many answers. > > Thanks in advance > -- Regards, Neelix PGP: 289C 2E3B A021 FAE8 9529 A128 1528 9E56 B4BE 1DD3 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/X3g2Roi2CigV_M5Z2u8T7jiwXrvx4EEAoKTB-oBm8CH-Dj1o-CZwK2hEJMwNWQw9c7Efu8tQk7iP4py4pZkhaYtHm4mPpr4VsJ14maeyRCM%3D%40x86.is. For more options, visit https://groups.google.com/d/optout. signature.asc Description: PGP signature
[qubes-users] How To: Verify Qubes Digital Signatures and Key Verification (Verifying Signatures)
Greetings everybody! My name is Mister Trizzle. In this post I will be talking about the video tutorial I made for helping people verify signatures. I will do this by: Providing a link to the tutorial, link provided in the description below Second, providing a description of the video and finally, Asking for feedback Let's get started. First, here is the YouTube video link: https://www.youtube.com/watch?v=U486ArYvOSc In this tutorial we will be easily verifying signatures to ensure that your download of the Qubes ISO is more authentic. This is important because evil, desperate people suffering from IBS and with malicious intent may try to compromise your download. Using this tutorial assumes that you are not using a compromised computer. If your computer is compromised then no amount of verifications or fancy doo-dads will help. I would appreciate any feedback to make the video better and any future videos more accurate and engaging. Thank you for your time. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/7df9ef5d-c3dd-4a59-91d8-ffc6416ba858n%40googlegroups.com.
