Verify your VASP download - Revision history

Vaspmaster: /* One-time setup: import and verify our signing key */

2026-07-21T12:56:16Z

One-time setup: import and verify our signing key

← Older revision		Revision as of 12:56, 21 July 2026
Line 28:		Line 28:
	B6B8 DA17 E026 0987 9C3A A6A7 0AB6 9231 7329 6690		B6B8 DA17 E026 0987 9C3A A6A7 0AB6 9231 7329 6690

	~~<!--~~		(Check this against [https://www.vasp.at/info/faq/verification/ the value on our website] as well for additional security.)
	(Check this against the value on our website as well for additional security.)
	~~-->~~
	You only need to do this once.		You only need to do this once.

2026-07-21T12:52:55Z

Interpreting the result

← Older revision		Revision as of 12:52, 21 July 2026
Line 72:		Line 72:
	If you have any doubt about the integrity of a download, stop and contact us at		If you have any doubt about the integrity of a download, stop and contact us at
	'''support@vasp.at''' before installing.		'''support@vasp.at''' before installing.

			== Related tags and articles ==
			[[Installing VASP.6.X.X]], [[Personal computer installation]], [https://vasp.at/info/faq/verification/ Verification FAQ]

	[[Category:VASP]]		[[Category:VASP]]
	[[Category:Installation]]		[[Category:Installation]]

2026-07-21T10:33:03Z

1. Confirm the checksums file is authentic:

← Older revision		Revision as of 10:33, 21 July 2026
Line 45:		Line 45:
	WARNING: This key is not certified with a trusted signature!		WARNING: This key is not certified with a trusted signature!
	There is no indication that the signature belongs to the owner.</code>		There is no indication that the signature belongs to the owner.</code>
	It means that GnuPG does not trust this public key because you have not marked the key as [https://www.gnupg.org/faq/gnupg-faq.html#define_trust trusted]. The key fingerprint will also be given and must match the one above.		It means that GnuPG does not trust this public key because you have not marked the key as [https://www.gnupg.org/faq/gnupg-faq.html#define_trust trusted]. The key fingerprint will also be given and '''must''' match the one above.
	}}		}}

2026-07-21T10:32:42Z

1. Confirm the checksums file is authentic:

← Older revision		Revision as of 10:32, 21 July 2026
Line 41:		Line 41:
	gpg --verify SHA256SUMS_<version>.asc SHA256SUMS_<version>		gpg --verify SHA256SUMS_<version>.asc SHA256SUMS_<version>

	Look for a line reading <code>Good signature from "VASP Software GmbH ..."</code>~~. The key fingerprint must match the one above~~.		Look for a line reading <code>Good signature from "VASP Software GmbH ..."</code>.
	{{NB\|mind\|Seeing the following warning is normal:		{{NB\|mind\|Seeing the following warning is normal:
	WARNING: This key is not certified with a trusted signature!		WARNING: This key is not certified with a trusted signature!
	There is no indication that the signature belongs to the owner.</code>		There is no indication that the signature belongs to the owner.</code>
	It means that GnuPG does not trust this public key because you have not marked the key as [https://www.gnupg.org/faq/gnupg-faq.html#define_trust trusted].		It means that GnuPG does not trust this public key because you have not marked the key as [https://www.gnupg.org/faq/gnupg-faq.html#define_trust trusted]. The key fingerprint will also be given and must match the one above.
	}}		}}

2026-07-21T10:32:22Z

← Older revision		Revision as of 10:32, 21 July 2026
Line 41:		Line 41:
	gpg --verify SHA256SUMS_<version>.asc SHA256SUMS_<version>		gpg --verify SHA256SUMS_<version>.asc SHA256SUMS_<version>

	Look for a line reading <code>Good signature from "VASP Software GmbH ..."</code>.		Look for a line reading <code>Good signature from "VASP Software GmbH ..."</code>. The key fingerprint must match the one above.
	{{NB\|mind\|Seeing the following warning is normal:		{{NB\|mind\|Seeing the following warning is normal:
	WARNING: This key is not certified with a trusted signature!		WARNING: This key is not certified with a trusted signature!

2026-07-21T09:54:53Z

← Older revision		Revision as of 09:54, 21 July 2026
Line 42:		Line 42:

	Look for a line reading <code>Good signature from "VASP Software GmbH ..."</code>.		Look for a line reading <code>Good signature from "VASP Software GmbH ..."</code>.
	~~<!--~~{{NB\|mind\|Seeing the following warning is normal:		{{NB\|mind\|Seeing the following warning is normal:
	WARNING: This key is not certified with a trusted signature!		WARNING: This key is not certified with a trusted signature!
	There is no indication that the signature belongs to the owner.</code>		There is no indication that the signature belongs to the owner.</code>
	It means that ~~GPG~~ does not trust this public key because you have not marked the key as [[https://www.gnupg.org/faq/gnupg-faq.html~~?utm_source=chatgpt.com~~#define_trust\|trusted]].		It means that GnuPG does not trust this public key because you have not marked the key as [https://www.gnupg.org/faq/gnupg-faq.html#define_trust trusted].
	}}~~-->~~		}}

	=== 2. Confirm your downloaded files match the checksums: ===		=== 2. Confirm your downloaded files match the checksums: ===

2026-07-21T09:49:06Z

← Older revision		Revision as of 09:49, 21 July 2026
Line 37:		Line 37:
	Run both commands in the directory containing the downloaded files.		Run both commands in the directory containing the downloaded files.

	1. Confirm the checksums file is authentic:		=== 1. Confirm the checksums file is authentic: ===

	gpg --verify SHA256SUMS_<version>.asc SHA256SUMS_<version>		gpg --verify SHA256SUMS_<version>.asc SHA256SUMS_<version>

	Look for a line reading <code>Good signature from "VASP Software GmbH ..."</code>.		Look for a line reading <code>Good signature from "VASP Software GmbH ..."</code>.
			<!--{{NB\|mind\|Seeing the following warning is normal:
			WARNING: This key is not certified with a trusted signature!
			There is no indication that the signature belongs to the owner.</code>
			It means that GPG does not trust this public key because you have not marked the key as [[https://www.gnupg.org/faq/gnupg-faq.html?utm_source=chatgpt.com#define_trust\|trusted]].
			}}-->

	2. Confirm your downloaded files match the checksums:		=== 2. Confirm your downloaded files match the checksums: ===

	sha256sum -c SHA256SUMS_<versions>		sha256sum -c SHA256SUMS_<versions>

2026-07-21T09:03:48Z

← Older revision		Revision as of 09:03, 21 July 2026
Line 67:		Line 67:
	If you have any doubt about the integrity of a download, stop and contact us at		If you have any doubt about the integrity of a download, stop and contact us at
	'''support@vasp.at''' before installing.		'''support@vasp.at''' before installing.

			[[Category:VASP]]
			[[Category:Installation]]

2026-07-20T17:21:29Z

← Older revision		Revision as of 17:21, 20 July 2026
Line 28:		Line 28:
	B6B8 DA17 E026 0987 9C3A A6A7 0AB6 9231 7329 6690		B6B8 DA17 E026 0987 9C3A A6A7 0AB6 9231 7329 6690

			<!--
	(Check this against the value on our website as well for additional security.)		(Check this against the value on our website as well for additional security.)
			-->
	You only need to do this once.		You only need to do this once.

2026-07-20T16:57:54Z

For each download: verify the signature, then the checksums

← Older revision		Revision as of 16:57, 20 July 2026
Line 48:		Line 48:
	(On macOS, use <code>shasum -a 256 -c SHA256SUMS_<version></code> instead.)		(On macOS, use <code>shasum -a 256 -c SHA256SUMS_<version></code> instead.)

	Each file should report `OK`.		Each file should report <code>OK</code>.

	== Interpreting the result ==		== Interpreting the result ==