-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

To ensure the image has not been corrupted in transmit or tampered with,
perform the following two steps to cryptographically verify image integrity:

1. Verify the authenticity of this file by checking that it is signed with our
   GPG release key:

    $ curl https://keybase.io/turnkeylinux/pgp_keys.asc | gpg --import
    $ gpg --list-keys --with-fingerprint release@turnkeylinux.com
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
            Key fingerprint = 694C FF26 795A 29BA E07B  4EB5 85C2 5E95 A16E B94D
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-joomla3-15.4-stretch-amd64-vmdk.zip.hash
      gpg: Signature made using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key <release@turnkeylinux.com>"

    For extra credit you can validate the key's authenticity at:

      https://keybase.io/turnkeylinux

2. Recalculate the image hash and make sure it matches your choice of hash below.

    $ sha256sum turnkey-joomla3-15.4-stretch-amd64-vmdk.zip
      586267650a1fe839cb3a6bd370a65c66a31f5ee6256fafcb95a615b7223a167a  turnkey-joomla3-15.4-stretch-amd64-vmdk.zip

    $ sha512sum turnkey-joomla3-15.4-stretch-amd64-vmdk.zip
      26c6f3c76cd22c01ac5fb11e0b90c0e745a4fb273b6dca79484c201aeb04106fe40f4f751534ef99558e787ccb900c211ba4b2ab3510054bf5bbf845da62088a  turnkey-joomla3-15.4-stretch-amd64-vmdk.zip

   Note, you can compare hashes automatically::

    $ sha256sum -c turnkey-joomla3-15.4-stretch-amd64-vmdk.zip.hash
      turnkey-joomla3-15.4-stretch-amd64-vmdk.zip: OK

    $ sha512sum -c turnkey-joomla3-15.4-stretch-amd64-vmdk.zip.hash
      turnkey-joomla3-15.4-stretch-amd64-vmdk.zip: OK

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEaUz/JnlaKbrge061hcJelaFuuU0FAlyZ3PsACgkQhcJelaFu
uU22rAf7BhNvxXV7zFbUrTpNupnFtiiEYGu0OuMAnE3H2wVRk9vOSJaeETw8nD4W
ZYHdatZR6CQ3Zmk5jcscajr01fKBWYdGKvAxjpSvzt2KftxtZudDM7p4Km4TZ6TU
MqoNK5W8oWYrTEcO6BTcNyr4sGSQhmePWOLcqILLhfNcawsE1gKx+kbGNDFeGkst
iL4ok8E6YbA02hcu0XS9wGZvi/A8C0KV/Z8+IfE+FxUIHXjrwVMB1h4BCqjPDHOB
g0ky0D7wVmhK7v34+bReORRTOKsXRIvMIjsqBjczDkAcBQ8TWGwqtmOkzn5f2nKE
nkXmEwtMQLDp1qhJ7kKnpMvF1sZ+Yg==
=GjrL
-----END PGP SIGNATURE-----