verification fails for OPNsense-26.7-vga-amd64.img.bz2 despite matching checksum

[tj0219]

Hi everyone, I have tried walking through this a few times and I'm stuck. In fairness I'm a beginner and its not looking good. lol

I cant get the published .sig file for the 26.7 vga-amd64 image to verify against the published .img.bz2 and .pub files, using the exact verification process documented at docs.opnsense.org/manual/install.html.

I have tried downloading fresh files from multiple mirrors, as well as on two different systems.


these are the files i have grabbed:
OPNsense-26.7-vga-amd64.img.bz2
OPNsense-26.7-vga-amd64.img.sig
OPNsense-26.7.pub
OPNsense-26.7-checksums-amd64.sha256

i downloaded the newest version of SSL:
OpenSSL 4.0.2 25 Aug 2026


just get this

Verification failure
64250000:error:0308010C:digital envelope routines:inner_evp_generic_fetch:unsupported:crypto\evp\evp_fetch.c:376:Global default library context, Algorithm (dgst : 0), Properties (<null>)
64250000:error:02000068:rsa routines:ossl_rsa_verify:bad signature:crypto\rsa\rsa_sign.c:441:
64250000:error:1C880004:Provider routines:rsa_verify_directly:RSA lib:providers\implementations\signature\rsa_sig.c:1071:

Any help or ideas on what to try would be appreciated.

Thanks!

[patient0]

Please post the exact commands you run (up to the one that failed), one by one. And include what operation system you used.

[franco]

The signature is for the uncompressed image. The checksum is for the compressed image.


Cheers,
Franco

[tj0219]

Running Windows 11

ran Get-FileHash .\OPNsense-26.7-vga-amd64.img.bz2 -Algorithm SHA256 to verify the Hash, which checked out against the file i downloaded "OPNsense-26.7-checksums-amd64.sha256"

Then ran:

& "C:\Program Files\OpenSSL-Win64\bin\openssl.exe" base64 -d -in ".\OPNsense-26.7-vga-amd64.img (3).sig" -out .\image.sig

Which i think passed.


Followed by

 & "C:\Program Files\OpenSSL-Win64\bin\openssl.exe" dgst -sha256 -verify .\OPNsense-26.7.pub -signature .\image.sig .\OPNsense-26.7-vga-amd64.img.bz2

and it failed with the message from my earlier post.

Thanks!
Tyler

[tj0219]

never mind, i figured it out, I'm an idiot. I realized i didn't unpack the files. helps if i read the instructions. LOL

Thanks!

Tyler

[patient0]

I realized i didn't unpack the files. helps if i read the instructions

Better late then never :) Have an excellent Sunday.