@@ -39,15 +39,16 @@ Verifying the Suricata Distribution File
3939~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
4040
4141To verify the contents of the Suricata distribution file the following command
42- could be ran on the Suricata 7.0.5 distribution file::
42+ could be ran on the Suricata 8.0.0 distribution file. (Keep in mind that this
43+ should always be updated to the actual version and file names you are verifying.)::
4344
44- $ gpg --verify suricata-7 .0.5 .tar.gz.sig suricata-7 .0.5 .tar.gz
45+ $ gpg --verify suricata-8 .0.0 .tar.gz.sig suricata-8 .0.0 .tar.gz
4546
4647Depending on the trust level assigned to the OISF signing keys, something
4748similar to the following output should be seen::
4849
49- $ gpg --verify suricata-7 .0.5 .tar.gz.sig suricata-7 .0.5 .tar.gz
50- gpg: Signature made Tue 23 Apr 2024 11:58:56 AM UTC
50+ $ gpg --verify suricata-8 .0.0 .tar.gz.sig suricata-8 .0.0 .tar.gz
51+ gpg: Signature made Tue 08 Jul 2025 11:12:04 AM UTC
5152 gpg: using RSA key B36FDAF2607E10E8FFA89E5E2BA9C98CCDF1E93A
5253 gpg: checking the trustdb
5354 gpg: marginals needed: 3 completes needed: 1 trust model: pgp
@@ -60,7 +61,7 @@ This indicates a valid signature and that the signing key is trusted.
6061
6162.. note :: If output from the `--verify` command is similar to the following::
6263
63- gpg: Signature made Tue 23 Apr 2024 11:58:56 AM UTC
64+ gpg: Signature made Tue 08 Jul 2025 11:12:04 AM UTC
6465 gpg: using RSA key B36FDAF2607E10E8FFA89E5E2BA9C98CCDF1E93A
6566 gpg: Can't check signature: No public key
6667
@@ -69,7 +70,7 @@ This indicates a valid signature and that the signing key is trusted.
6970
7071.. note :: If output from the `--verify` command is similar to the following::
7172
72- gpg: Signature made Tue 23 Apr 2024 11:58:56 AM UTC
73+ gpg: Signature made Tue 08 Jul 2025 11:12:04 AM UTC
7374 gpg: using RSA key B36FDAF2607E10E8FFA89E5E2BA9C98CCDF1E93A
7475 gpg: Good signature from "Open Information Security Foundation (OISF)
7576 <releases@openinfosecfoundation.org>" [unknown]
@@ -83,4 +84,4 @@ This indicates a valid signature and that the signing key is trusted.
8384
8485 If there are questions regarding the validity of the downloaded file, the
8586 OISF team can be reached at `security @ oisf.net ` (remove the spaces between
86- the `@ ` before sending).
87+ the `@ ` before sending).
0 commit comments