Great idea. $ sha256sum NZRS-Custom-Live-CD-v1.6.iso f0c151a83a4cb3ac3d2616f754760e78ba475e5a124d67434bc5756e26193cd3 NZRS-Custom-Live-CD-v1.6.iso On Tue, Nov 15, 2011 at 9:04 AM, Sebastian Castro wrote:

Dear Community,

According to our schedule, this Friday November 18th, we will be running the Key Generation Procedure to create the keys to sign .nz

For this procedure, we will be using a customized Ubuntu Live CD to start the laptop that will serve as console. We'd like to ask you to download the ISO file to be used to create the Live CD, generate the SHA256 checksum and post it back to the mailing list. During the procedure, we will compare the digest posted to the list, with the digest generated in the laptop.

The purpose of this is two-fold: use a different set of binaries to create the digest, to make sure our tools haven't been tampered, and to give the option to the community to review the ISO and see we are using standard tools for the job.

The ISO is located at https://secure.nzrs.net.nz/sites/default/files/NZRS-Custom-Live-CD-v1.6.iso

NOTE: On a Unix machine, you can generate the sha256 checksum using

sha256sum NZRS-Custom-Live-CD-v1.6.iso

or

openssl dgst -c -sha256 NZRS-Custom-Live-CD-v1.6.iso

Thanks for your help,

Kind Regards -- Sebastian Castro DNS Specialist .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535 _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

$ sha256sum NZRS-Custom-Live-CD-v1.6.iso f0c151a83a4cb3ac3d2616f754760e78ba475e5a124d67434bc5756e26193cd3 NZRS-Custom-Live-CD-v1.6.iso $ openssl dgst -c -sha256 NZRS-Custom-Live-CD-v1.6.iso SHA256(NZRS-Custom-Live-CD-v1.6.iso)= f0:c1:51:a8:3a:4c:b3:ac:3d:26:16:f7:54:76:0e:78:ba:47:5e:5a:12:4d:67:43:4b:c5:75:6e:26:19:3c:d3 Cheers On Tue, 15 Nov 2011, Sebastian Castro wrote:

Dear Community,

According to our schedule, this Friday November 18th, we will be running the Key Generation Procedure to create the keys to sign .nz

For this procedure, we will be using a customized Ubuntu Live CD to start the laptop that will serve as console. We'd like to ask you to download the ISO file to be used to create the Live CD, generate the SHA256 checksum and post it back to the mailing list. During the procedure, we will compare the digest posted to the list, with the digest generated in the laptop.

The purpose of this is two-fold: use a different set of binaries to create the digest, to make sure our tools haven't been tampered, and to give the option to the community to review the ISO and see we are using standard tools for the job.

The ISO is located at https://secure.nzrs.net.nz/sites/default/files/NZRS-Custom-Live-CD-v1.6.iso

NOTE: On a Unix machine, you can generate the sha256 checksum using

sha256sum NZRS-Custom-Live-CD-v1.6.iso

or

openssl dgst -c -sha256 NZRS-Custom-Live-CD-v1.6.iso

Thanks for your help,

Kind Regards -- Sebastian Castro DNS Specialist .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535 _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 # ls -l NZRS-Custom-Live-CD-v1.6.iso - -rw-r--r--@ 1 asjl asjl 613691392 15 Nov 10:47 NZRS-Custom-Live-CD-v1.6.iso # openssl dgst -c -sha256 NZRS-Custom-Live-CD-v1.6.iso SHA256(NZRS-Custom-Live-CD-v1.6.iso)= f0:c1:51:a8:3a:4c:b3:ac:3d:26:16:f7:54:76:0e:78:ba:47:5e:5a:12:4d:67:43:4b:c5:75:6e:26:19:3c:d3 # shasum -a 256 NZRS-Custom-Live-CD-v1.6.iso f0c151a83a4cb3ac3d2616f754760e78ba475e5a124d67434bc5756e26193cd3 NZRS-Custom-Live-CD-v1.6.iso -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iD8DBQFOwY09kNpmQ2ketuURAn1AAJ9NQ07omCZuhwTRiFa6w+99N+Z5uQCg+rlf 0k7t36Y8cDao5Fp/zXUD+Yk= =qZ7L -----END PGP SIGNATURE-----

$ sha256sum NZRS-Custom-Live-CD-v1.6.iso f0c151a83a4cb3ac3d2616f754760e78ba475e5a124d67434bc5756e26193cd3 NZRS-Custom-Live-CD-v1.6.iso Jonathon -----Original Message----- From: nznog-bounces(a)list.waikato.ac.nz [mailto:nznog-bounces(a)list.waikato.ac.nz] On Behalf Of Sebastian Castro Sent: Tuesday, 15 November 2011 9:04 a.m. To: nznog Subject: [nznog] DNSSEC Key Generation for .nz, request for cooperation Dear Community, According to our schedule, this Friday November 18th, we will be running the Key Generation Procedure to create the keys to sign .nz For this procedure, we will be using a customized Ubuntu Live CD to start the laptop that will serve as console. We'd like to ask you to download the ISO file to be used to create the Live CD, generate the SHA256 checksum and post it back to the mailing list. During the procedure, we will compare the digest posted to the list, with the digest generated in the laptop. The purpose of this is two-fold: use a different set of binaries to create the digest, to make sure our tools haven't been tampered, and to give the option to the community to review the ISO and see we are using standard tools for the job. The ISO is located at https://secure.nzrs.net.nz/sites/default/files/NZRS-Custom-Live-CD-v1.6.iso NOTE: On a Unix machine, you can generate the sha256 checksum using sha256sum NZRS-Custom-Live-CD-v1.6.iso or openssl dgst -c -sha256 NZRS-Custom-Live-CD-v1.6.iso Thanks for your help, Kind Regards -- Sebastian Castro DNS Specialist .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535 _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog This email and attachments: are confidential; may be protected by privilege and copyright; if received in error may not be used, copied, or kept; are not guaranteed to be virus-free; may not express the views of Kordia(R); do not designate an information system; and do not give rise to any liability for Kordia(R).