-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://keybase.io/turnkeylinux/pgp_keys.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release@turnkeylinux.com
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
            Key fingerprint = 694C FF26 795A 29BA E07B  4EB5 85C2 5E95 A16E B94D
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-oscommerce-15.1-stretch-amd64.iso.hash
      gpg: Signature made using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key <release@turnkeylinux.com>"

    For extra credit you can validate the key's authenticity at:

      https://keybase.io/turnkeylinux

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-oscommerce-15.1-stretch-amd64.iso
      fbea834625480ec6231bfec39da0535cfc40665c1318ef43f2f3176ffd942fa2  turnkey-oscommerce-15.1-stretch-amd64.iso

    $ sha512sum turnkey-oscommerce-15.1-stretch-amd64.iso
      b5fb4e1df9d96b9873fccc34ad0dfe6f93f63646d72e735654341bb369cdc7754f843666566b25e05ff71d628ac345b329d13be2ad6bd49b0ca4e474e81ffc1d  turnkey-oscommerce-15.1-stretch-amd64.iso

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-oscommerce-15.1-stretch-amd64.iso.hash
      turnkey-oscommerce-15.1-stretch-amd64.iso: OK

    $ sha512sum -c turnkey-oscommerce-15.1-stretch-amd64.iso.hash
      turnkey-oscommerce-15.1-stretch-amd64.iso: OK

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEaUz/JnlaKbrge061hcJelaFuuU0FAlv/pi8ACgkQhcJelaFu
uU3AoQgA3U+Qks0AUPbI5UIDPZ80NwWX7RYo+JwHWQOjb6MU7S/sUjk5jU7RTqjr
7quN3/w7SjOIC3DNBRuh7Bc8qmdDIfAsrvEIvrZN5X5NcjzwT5UYJHE0yMp8T9BH
iNwhwWMMGmcF6QJp0G103NGxoSy98NAiA+dQd5vOP3oI4HE3waYtRT7s5ZbGHhr7
7t3E+szYFFMmlecYs+XLQIuv+4GfBwsJ2nWo4l1pJxg5m8+1dgBI2cPwpG852pUK
d5qhbAIfms6cp9X0L+4T4Hw90NLLAwrHhopmh0dgBwrmqO2t72mhNTziybR6ASsf
bpY2r7g3pomRFvvBQP5rj6RpKHpBNQ==
=H9hm
-----END PGP SIGNATURE-----