Comments (3)
UPDATE
Please see below for the correct files to compare according to the instructions and same Verification Failure.
Downloaded files
ledger-live-desktop-2.42.0-mac.dmg
ledger-live-desktop-2.42.0.sha512sum
ledger-live-desktop-2.42.0.sha512sum.sig
ledgerlive.cer
Screenshot
vs. Ledger Live instructions
$ openssl dgst -sha256 -verify ledgerlive.pem -signature ledger-live-desktop-2.42.0.sha512sum.sig ledger-live-desktop-2.42.0.sha512sum
Verified OK
Differences
- sha512 instead of sha256
- .cer instead of .pem certificate
from ledger-live.
Hi @acashmoney,
I just went through the instructions of https://www.ledger.com/ledger-live/lld-signatures
and to me it works correctly:
- The installer binaries are all hashed using SHA512 into a checksum files:
$ cat ledger-live-desktop-2.42.0.sha512sum
51d61df7e9c0c716eaa57700dc871e745d2206727c3400b06ef6c30a0e535679ee99bb2f04dbafdbcdcc5e28dc24f97e6fb5c811360a5df83ace517651c192dc ledger-live-desktop-2.42.0-linux-x86_64.AppImage
dfea05c59003b60a55a50998285c4f57b261b09fd211cc0e624cbfa82690be069abcebb0e07e12a61634deb28035a5bf49557a2afdb12fc5306e2743b915cbb8 ledger-live-desktop-2.42.0-mac.dmg
ef20a9edb9f5419db1379e756f170faed0a7dd6893aa961df47d76970b09f6fc0448b89e7f934127f265f5ae4da72d3852b3815005dc00883d82f8c69f42ad49 ledger-live-desktop-2.42.0-mac.zip
0fb189e8e6f3f6d15a298040ccc896d43f09766b25f7fba67d549fe09ec14269d41bead677186ed2acfa2ce458a78c37481307c3fe7599d80688a10f320ff563 ledger-live-desktop-2.42.0-win-x64.exe
- a SHA256 hash of this file is then produced. in this case,
c0bf4150fa081dba51b42997df59c913f1440f7bc9086fefff303abc55d4c3c3
- a signature of this hash is done by ledger. it's the .sig file.
that's why you give -sha256
to openssl as it need to hash with SHA256 the ledger-live-desktop-2.42.0.sha512sum checksum file.
Indeed we use a combination of SHA 512 and SHA 256 and this probably creates this confusion. I hope this explanation makes sense.
from ledger-live.
Thanks for clearing up the confusion @gre. Verification works now on my end. Cheers!
from ledger-live.
Related Issues (20)
- [Bug]: ledgerhq/hw-app-eth // e2e-eth-tutorial // Failed to resolve... HOT 2
- [Bug]: Installing Meter app fails HOT 2
- Incorrect Tezos APY [Bug]: HOT 1
- [Bug]: signEIP712Message result error HOT 17
- [Bug]: Unable to resolve module @ledgerhq/domain-service/signers/index HOT 9
- [Feature]: Add deterministic URL path for binary signature HOT 1
- [Feature]: Add multiple accounts and switch between EVM chains similar to 3rd party wallets HOT 1
- [Feature]: Solana Alt-coin Support HOT 1
- [Bug]: dependencies were not found in Nuxt2 HOT 1
- [Bug]: signature verification failed on BnB Beacon Chain HOT 1
- [Feature]: Include Icelandic Kronur as a preferred currency in Ledger Live HOT 1
- [Bug]: Bitcoin hw-signMessage returns base64-encoded signature when downstream consumers expect hex HOT 1
- [Bug]: @ledgerhq/hw-transport-web-ble throws error on Transport.create() HOT 1
- [Bug]: incorrect offset in reading APDU answer of `GetVersion` HOT 2
- [Bug]: Argument of type 'RequestInfo' is not assignable to parameter of type 'string'. HOT 5
- [Bug]: @ledgerhq/hw-transport-web-ble throws error on Transport.create() HOT 1
- [Bug]: tsconfig.json should be excluded from packages (e.g. from npm) HOT 2
- [Bug]: Ledger Live Recover on start-up - no exit functionality HOT 1
- [Bug]: Polkadot Send More than 1 DOT Applies to 11 DOT HOT 1
- [Bug]: Incompatible with @ledgerhq/errors HOT 16
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from ledger-live.