⚠️ Why Verify?

Verifying your download protects you from malicious software that could steal your funds. Always verify before installing.

✅ Quick Verification (SHA256)

The easiest way to verify file integrity:

  1. Download the checksum file:
    curl -O https://opensyria.net/downloads/SHA256SUMS
  2. Verify the file:
    sha256sum -c SHA256SUMS
  3. Expected output:
    OpenSY-1.0.0.apk: OK

On macOS: Use shasum -a 256 -c SHA256SUMS

🔒 Full Verification (GPG)

To verify the file was signed by the OpenSY team:

  1. Import our public key:
    curl https://opensyria.net/pgp-key.asc | gpg --import
  2. Download the signature:
    curl -O https://opensyria.net/downloads/SHA256SUMS.asc
  3. Verify the signature:
    gpg --verify SHA256SUMS.asc SHA256SUMS
  4. Expected output:
    gpg: Good signature from "OpenSY Release Signing <releases@opensyria.net>"

🔑 Key Fingerprint

Verify the imported key matches this fingerprint:

5275 70F8 2778 516C 99BE
30F8 8E69 AEA9 4D9C BB8A

To verify:

gpg --fingerprint releases@opensyria.net

❓ Troubleshooting

If verification fails:

  • Ensure you downloaded from opensyria.net only
  • Re-download the file - it may be corrupted
  • Check your internet connection stability
  • If the problem persists, report it on GitHub

Need help? Open an issue on GitHub