Validating IBM Mobile Foundation archive downloaded from Fixcentral (Optional)
improve this page | report issueValidating IBM Mobile Foundation archive downloaded from Fixcentral (Optional)
IBM Mobile Foundation ZIP packages for Mac Devkit, Server, Server Bluemix, Server Pattern, and StudioP2 are available in Fixcentral. They are code signed (with Digi Cert) to enforce integrity of the package. The .sig (signature file) and .pub (RSA public key) files are uploaded to Fixcentral along with the corresponding IBM MobileFirst Platform Foundation V8.0 .zip packages (IBM MobileFirst Platform Mac Devkit, Server, Server Bluemix, Server Pattern, StudioP2). You can validate the integrity of the package by verifying the signature as follows:
Package Information as available in Fixcentral
Package: IBM MobileFirst Platform Foundation V8.0 .zip files of IBM MobileFirst Platform Server on Mac Devkit, Server, Server Bluemix, Server Pattern, StudioP2 packages.
Signature File: Signature file for IBM MobileFirst Platform Foundation V8.0 .zip file of IBM MobileFirst Platform Server on Mac Devkit, Server, Server Bluemix, Server Pattern, StudioP2 packages.
RSA Public Key: Public Key file for IBM MobileFirst Platform Foundation V8.0 .zip file of IBM MobileFirst Platform Server on Mac Devkit, Server, Server Bluemix, Server Pattern, StudioP2 packages.
Steps to verify the signature
- Download and install the openssl toolkit.
- Verify the IBM Mobile Foundation package using the following command.
openssl dgst -sha256 -verify <PUBLIC_KEY> -signature <SIGNATURE_FILE> <IBM MOBILE FOUNDATION PACKAGE ARCHIVE>
For example:
openssl dgst -sha256 -verify 8.0.0.0-MFPF-DevKit-Mac-IFXXXXXXXXXXXX.pub -signature 8.0.0.0-MFPF-DevKit-Mac-IFXXXXXXXXXXXX.sig 8.0.0.0-MFPF-DevKit-Mac-IFXXXXXXXXXXXX.zip
The expected result of the command is “Verified OK”.
Inclusive terminology note: The Mobile First Platform team is making changes to support the IBM® initiative to replace racially biased and other discriminatory language in our code and content with more inclusive language. While IBM values the use of inclusive language, terms that are outside of IBM's direct influence are sometimes required for the sake of maintaining user understanding. As other industry leaders join IBM in embracing the use of inclusive language, IBM will continue to update the documentation to reflect those changes.