Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Desktop app signature verification section #132

Open
wants to merge 8 commits into
base: main
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 12 additions & 0 deletions src/content/pages/apps-linux.md
Original file line number Diff line number Diff line change
Expand Up @@ -43,6 +43,9 @@ contents:
- item:
title: Install from Source Code
anchor: source
- item:
title: Signature Verification
anchor: signature-verification
- item:
title: Useful Links
anchor: useful-links
Expand Down Expand Up @@ -178,6 +181,15 @@ SHA256: 28efe2eadd7a80a058fe2439c6fc005100b2b1ac58a6a498d27f2a981858bad4
[Base package CLI on GitHub](https://github.com/ivpn/desktop-app-cli#linux-1)
[UI package on GitHub](https://github.com/ivpn/desktop-app-ui2#installation)

## Signature Verification {#signature-verification}

Each Linux binary is signed by a GPG key.

GPG key location:

* for DEB files: `<repository path>/generic.gpg` (example: `https://repo.ivpn.net/stable/ubuntu/generic.gpg`)
* for RPM files: `<repository path>/repo.gpg` (example: `https://repo.ivpn.net/stable/fedora/generic/repo.gpg`)

## Useful Links {#useful-links}

If you prefer not to use the IVPN app please follow the relevant setup guide below.
Expand Down
23 changes: 21 additions & 2 deletions src/content/pages/apps-macos.md
Original file line number Diff line number Diff line change
Expand Up @@ -36,7 +36,7 @@ releases: [{
- Auto-update.
- Auto-connect on launch / on joining insecure Wi-Fi.

## Manual configuration
## Manual Configuration

If you prefer not to use the IVPN app please follow the relevant setup guide below.

Expand All @@ -46,7 +46,26 @@ If you are using OpenVPN download the latest OpenVPN [UDP](/releases/config/ivpn
- [Tunnelblick (OpenVPN) for macOS Setup Guide](/setup/macos-openvpn-tunnelblick/)
- [IPSec IKEv2 for macOS Setup Guide](/setup/macos-ipsec-with-ikev2/)

## Download legacy version
## Signature Verification

The OpenSSL public key file has to be used for verification:

* `https://repo.ivpn.net/macos/keys/public.pem`

Next steps should be performed, to verify the signature (example):

1. Download ‘installer' and it's signature (e.g. `https://repo.ivpn.net/macos/bin/IVPN-3.3.7.dmg` and `https://repo.ivpn.net/macos/bin/IVPN-3.3.7.dmg.sign.sha256.base64`)
2. Download OpenSSL public key for verification `https://repo.ivpn.net/macos/keys/public.pem`
3. Verification commands

{{< highlight shell >}}
# Decode base64:
$ openssl base64 -d -in IVPN-3.3.7.dmg.sign.sha256.base64 -out IVPN-3.3.7.dmg.sign.sha256
# Check signature:
$ openssl dgst -sha256 -verify public.pem -signature IVPN-3.3.7.dmg.sign.sha256 IVPN-3.3.7.dmg
{{< /highlight >}}

## Download Legacy Version

Download [IVPN-2.12.17.dmg](https://cdn.ivpn.net/releases/osx/IVPN-2.12.17.dmg)
SHA256: 0fd09967482f53c801dc55eaf23a88ad341da37f58d70d9c9e24c2e5aeb36c22
23 changes: 21 additions & 2 deletions src/content/pages/apps-windows.md
Original file line number Diff line number Diff line change
Expand Up @@ -36,7 +36,7 @@ releases: [{
- Auto-update.
- Auto-connect on launch / on joining insecure Wi-Fi.

## Manual configuration
## Manual Configuration

If you prefer not to use the IVPN app please follow the relevant setup guide below.

Expand All @@ -47,7 +47,26 @@ If you are using OpenVPN download the latest OpenVPN [UDP](/releases/config/ivpn
- [Windows 10 IPSec IKEv2 Setup Guide](/setup/windows-10-ipsec-with-ikev2/)
- [OpenVPN Manual setup for Windows 8](/setup/windows-8-openvpn-community/)

## Download legacy version
## Signature Verification

The OpenSSL public key file has to be used for verification:

* `https://repo.ivpn.net/windows/keys/public.pem`

Next steps should be performed, to verify the signature (example):

1. Download ‘installer' and it's signature (e.g. `https://repo.ivpn.net/windows/bin/IVPN-Client-v3.3.7.exe` and `https://repo.ivpn.net/windows/bin/IVPN-Client-v3.3.7.exe.sign.sha256.base64`)
2. Download OpenSSL public key for verification `https://repo.ivpn.net/windows/keys/public.pem`
3. Verification commands

{{< highlight shell >}}
# Decode base64:
$ openssl base64 -d -in IVPN-Client-v3.3.7.exe.sign.sha256.base64 -out IVPN-Client-v3.3.7.exe.sign.sha256
# Check signature:
$ openssl dgst -sha256 -verify public.pem -signature IVPN-Client-v3.3.7.exe.sign.sha256 IVPN-Client-v3.3.7.exe
{{< /highlight >}}

## Download Legacy Version

Download [IVPN-2.12.17.exe](https://cdn.ivpn.net/releases/win/IVPN-Client-v2.12.17.exe)
SHA256: 7dce2cd90a2828f308c5c9063776d05af6074d974c57ee69a7ea79030640149a
17 changes: 10 additions & 7 deletions src/themes/ivpn-v3/assets/scss/elements/pre.scss
Original file line number Diff line number Diff line change
Expand Up @@ -88,13 +88,16 @@ pre {

.content--product {

pre {
padding: 0;
}
.highlight {

code {
overflow-x: auto;
white-space: nowrap;
padding: 44px 34px;
pre {
padding: 0;
}

code {
overflow-x: auto;
white-space: nowrap;
padding: 44px 34px;
}
}
}