verifying not working - gpg: can't open signed data

[iqworks]

I downloaded SO version securityonion-2.3.150-20220820.iso
I am trying to use SO on my windows 10 laptop, I don’t use the cloud.
I am using a dell laptop and windows 10 version 10.0.19044 build 19044
Not monitoring traffic right now until I get SO working.

I am trying to verify and I get this:
C:\Program Files (x86)\GNU\GnuPG>gpg --verify securityonion-2.3.150-20220820.iso.sig securityonion-2.3.150-20220820.iso
gpg: can't open signed data `securityonion-2.3.150-20220820.iso'
gpg: can't hash datafile: file open error

I followed the instructions from : https://github.com/Security-Onion-Solutions/securityonion/blob/master/VERIFY_ISO.md && https://www.youtube.com/watch?v=BFdTHGcsmkk

This is what I did:
First I downloaded “securityonion-2.3.150-20220820.iso”.
Then I installed Gnupg
https://www.gnupg.org/ / documentation

But I really selected download sig “GnuPG 1.4”

Then :
1 – get the sign in key:
C:\Program Files (x86)\gnupg\bin>wget https://raw.githubusercontent.com/Security-Onion-Solutions/
securityonion/master/KEYS -O - | gpg --import -

2 – Get the signature file for the security onion iso (to make sure the signature for the iso is correct):
C:\Program Files (x86)\GNU\GnuPG>wget https://github.com/Security-Onion-Solutions/securityonion/raw/master/sigs/securityonion-2.3.150-20220820.iso.sig
--2022-08-27 11:28:22-- https://github.com/Security-Onion-Solutions/securityonion/raw/master/sigs/securityonion-2.3.150-20220820.iso.sig
Resolving github.com (github.com)... 192.30.255.112
Connecting to github.com (github.com)|192.30.255.112|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://raw.githubusercontent.com/Security-Onion-Solutions/securityonion/master/sigs/securityonion-2.3.150-20220820.iso.sig [following]
--2022-08-27 11:28:22-- https://raw.githubusercontent.com/Security-Onion-Solutions/securityonion/master/sigs/securityonion-2.3.150-20220820.iso.sig
Resolving raw.githubusercontent.com (raw.githubusercontent.com)... 2606:50c0:8002::154, 2606:50c0:8003::154, 2606:50c0:8000::154, ...
Connecting to raw.githubusercontent.com (raw.githubusercontent.com)|2606:50c0:8002::154|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 543 [application/octet-stream]
Saving to: 'securityonion-2.3.150-20220820.iso.sig'

securityonion-2.3.150-2022082 100%[=================================================>] 543 --.-KB/s in 0s

2022-08-27 11:28:23 (23.1 MB/s) - 'securityonion-2.3.150-20220820.iso.sig' saved [543/543]

3 – check if the “securityonion-2.3.150-20220820.iso ” file is ok.
C:\Program Files (x86)\GNU\GnuPG>gpg --verify securityonion-2.3.150-20220820.iso.sig securityonion-2.3.150-20220820.iso
gpg: can't open signed data `securityonion-2.3.150-20220820.iso'
gpg: can't hash datafile: file open error

does this mean my iso is not valid ??

thanks for any advice and or suggestions

[dougburks]

First I downloaded “securityonion-2.3.150-20220820.iso”.

When you downloaded the ISO image, what directory did you download it to?

C:\Program Files (x86)\GNU\GnuPG>gpg --verify securityonion-2.3.150-20220820.iso.sig securityonion-2.3.150-20220820.iso

When you run this command, gpg looks for securityonion-2.3.150-20220820.iso in the current directory which is C:\Program Files (x86)\GNU\GnuPG. My guess is that's not where you downloaded the ISO image to.

[iqworks]

Yep, the ISO had to be in the same directory, thanks very much!! For others From: Doug Burks ***@***.***> Sent: Monday, August 29, 2022 4:55 AM To: Security-Onion-Solutions/securityonion ***@***.***> Cc: iqworks ***@***.***>; Author ***@***.***> Subject: Re: [Security-Onion-Solutions/securityonion] verifying not working - gpg: can't open signed data (Discussion #8615) First I downloaded “securityonion-2.3.150-20220820.iso”. When you downloaded the ISO image, what directory did you download it to? C:\Program Files (x86)\GNU\GnuPG>gpg --verify securityonion-2.3.150-20220820.iso.sig securityonion-2.3.150-20220820.iso When you run this command, gpg looks for securityonion-2.3.150-20220820.iso in the current directory which is C:\Program Files (x86)\GNU\GnuPG. My guess is that's not where you downloaded the ISO image to. — Reply to this email directly, view it on GitHub <#8615 (comment)> , or unsubscribe <https://github.com/notifications/unsubscribe-auth/ABKPV36SJXSSLC52RHG6IVLV3SQIBANCNFSM57Z4JXJA> . You are receiving this because you authored the thread. <https://github.com/notifications/beacon/ABKPV32H55CHGBLY63GMFELV3SQIBA5CNFSM57Z4JXJKYY3PNVWWK3TUL52HS4DFWFCGS43DOVZXG2LPNZBW63LNMVXHJKTDN5WW2ZLOORPWSZGOAA2WNKY.gif> Message ID: ***@***.*** ***@***.***> >