tag:gpgtools.tenderapp.com,2011-11-04:/discussions/feedback/15528-firefox-signGPGTools: Discussion 2020-06-24T17:11:46Ztag:gpgtools.tenderapp.com,2011-11-04:Comment/479781162020-01-07T21:07:50Z2020-06-24T17:11:41ZHow to verify signature of Firefox dmg download?<div><p>Hello, dear gentlemen!<br>
I want to use GPG keychain to verify the Firefox 71.0 version.<br>
But...</p>
<p>I downloaded my "Firefox 71.0.dmg" file and must place some KEYS from this source to the same directory<br>
<a href="https://releases.mozilla.org/pub/firefox/releases/71.0/">https://releases.mozilla.org/pub/firefox/releases/71.0/</a></p>
<p>I tried different ones, but I didn't succeed.<br>
Please, help!</p></div>Felixtag:gpgtools.tenderapp.com,2011-11-04:Comment/479781162020-01-12T18:15:27Z2020-01-12T18:15:27ZHow to verify signature of Firefox dmg download?<div><p>Hi Felix,</p>
<p>welcome to the GPGTools support platform. Sorry you are having problems using GPG Suite.</p>
<p>Let's use Firefox 72.0.1 as that includes important security fixes:<br>
<a href="https://releases.mozilla.org/pub/firefox/releases/72.0.1/">https://releases.mozilla.org/pub/firefox/releases/72.0.1/</a></p>
<p><a href="https://gpgtools.tenderapp.com/kb/how-to/how-to-verify-the-downloaded-gpg-suite#verify-signature-of-any-downloaded-file">https://gpgtools.tenderapp.com/kb/how-to/how-to-verify-the-download...</a></p>
<p>In the Firefox example visit <a href="https://releases.mozilla.org/pub/firefox/releases/72.0.1/KEY">https://releases.mozilla.org/pub/firefox/releases/72.0.1/KEY</a> then copy past everything after</p>
<pre>
<code>-----BEGIN PGP PUBLIC KEY BLOCK-----</code>
</pre>
<p>into GPG keychain. That will import the mozilla key.</p>
<p>Then download both<br>
File SHA256SUMS 490K 08-Jan-2020 10:30<br>
File SHA256SUMS.asc 833 08-Jan-2020 10:30</p>
<p>It seems mozilla does not sign the dmg itself so you will have to check the dmg sha265 sum. Our KB article also covers that. Mozilla then signes the checksum files so you can trust those files.</p>
<p>Best,<br>
Steve</p></div>Steve