How to verify a file
Every release includes SHA256SUMS with the checksum for each file. Use the commands below to calculate the SHA256 of your download, replacing the filename with the file you actually downloaded (the Windows and Linux commands apply once those versions are released). Checksum file: https://chan007.cc/download/SHA256SUMS
macOS (Terminal)
shasum -a 256 ~/Downloads/CCIso-0.1.7.pkg
Windows (PowerShell)
Get-FileHash .\CCIso-<version>-setup.exe -Algorithm SHA256
Linux (Terminal)
sha256sum cordon_<version>_amd64.deb
Compare the calculated SHA256 with the value published for that version. If they differ, do not run the file; confirm its source and integrity first.
How to check signatures
macOS: the installer is signed with Developer ID and notarized by Apple. In Terminal, from your download folder, check the installer; the result should include source=Notarized Developer ID:
spctl -a -vv -t install CCIso-0.1.7.pkg
After installation, you can also check the installed app:
spctl -a -vv /Applications/CCIso.app
Windows: the signer will be published with the Windows release. Then check Properties → Digital Signatures on the installer, or use PowerShell; Status should be Valid:
Get-AuthenticodeSignature .\CCIso-<version>-setup.exe
Linux: package verification instructions, signing public keys and fingerprints for any provided repository will be published with the Linux release.
Where download addresses are published
- The primary address is the download button on this page. Installers are served from the independent download directory on chan007.cc, with SHA256SUMS in the same directory.
- Any alternative download address will be listed for the relevant release.
- Only run an installer downloaded from this page whose checksum and signature both check out. Do not run files from unknown sources.
Read the changelog →