-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://keybase.io/turnkeylinux/pgp_keys.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release@turnkeylinux.com
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
            Key fingerprint = 694C FF26 795A 29BA E07B  4EB5 85C2 5E95 A16E B94D
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-lighttpd-php-fastcgi-15.1-stretch-amd64.iso.hash
      gpg: Signature made using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key <release@turnkeylinux.com>"

    For extra credit you can validate the key's authenticity at:

      https://keybase.io/turnkeylinux

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-lighttpd-php-fastcgi-15.1-stretch-amd64.iso
      692836ad881be47f4b8c53fb534267d4c099b615c9b268a60e8b2b19f2b6260d  turnkey-lighttpd-php-fastcgi-15.1-stretch-amd64.iso

    $ sha512sum turnkey-lighttpd-php-fastcgi-15.1-stretch-amd64.iso
      010844282fe2fa8659f3dd273848e3e20a1b1c63e6088b05231cf0ec5b5c09432218b6427d21575a3be3ac098f9fae0c740ff15f5a20cdc6f22abf92fcd289da  turnkey-lighttpd-php-fastcgi-15.1-stretch-amd64.iso

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-lighttpd-php-fastcgi-15.1-stretch-amd64.iso.hash
      turnkey-lighttpd-php-fastcgi-15.1-stretch-amd64.iso: OK

    $ sha512sum -c turnkey-lighttpd-php-fastcgi-15.1-stretch-amd64.iso.hash
      turnkey-lighttpd-php-fastcgi-15.1-stretch-amd64.iso: OK

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEaUz/JnlaKbrge061hcJelaFuuU0FAlv/piUACgkQhcJelaFu
uU3rzQf/Yp+ANINOrRtKVpuw8QpgF3siEZK/afZXAPXNwXdclCbsoYvkhC+/yaHd
c0wAcsObr+u3LiWMVr9qduxLdk2eS5psu1EYkSV3aGl6J/HVocRsK89mpi64EHyQ
5Wh/w6IUM5eO7461hTPBYCXOFzABsEGc93Hhf7cjR/5Krk5sOO8N+hpKkauyraW+
bCgcEZFiW2/cDs+Bvr2Hriv9KfQiGH1bRR3ryjesLx+zAGr8b2sim+wkDY0ZBJbG
S5G1w+QEFStWcCM+8PSgohSIe4E6mUpQTsXRKtIBSWHwd9IPm5Ns7Ueldq5n5WeN
za0icb/3zJNroBYKH2Q6Djbv5E06/Q==
=0Kf4
-----END PGP SIGNATURE-----