Kali Linux check

Boss has download Kali Linux into a pendrive and wants me to verify. He downloaded the image from https://www.kali.org/downloads/. There is an important steps before doing any installations. Which is to verify the signature of the image file.

Pretty much following the instruction in the webpage. But the only problem I found was boss didnt download the SHA1SUM files. I head over to the download page to get it download SHA1SUM files and put them into the folder together with the img file.

$ wget -q -O - https://www.kali.org/archive-key.asc | gpg --import

$ gpg --verify SHA1SUMS.gpg SHA1SUMS

Mistake done on the verifications. It should be this way below.

$ sha1sum kali-linux-2xx.x-amd64.iso

It will take sometime to calculate the md5 and display it on screen. Copy that md5 number and compare it against SHA1SUM (download from the download site). If its identical then its good to file and can proceed with installation.

Update from Ubuntu stock OpenSSL 1.0.1f to 1.0.2d manually

After getting install ubuntu onto a newly formatted notebook, then found out that the stock OpenSSL version is out of date. After some unsuccessful attempt and finally fond a reference from website : http://askubuntu.com/questions/429385/upgrade-openssl-on-ubuntu-12-04 stated:

First you need to completely remove the old installation: (this will break most systems! Be careful! Most people will regret this) apt-get purge openssl

sudo apt-get purge openssl

You may want to clean house by running:

apt-get autoremove && apt-get autoclean

Then you should download and compile the version you want (full list)

wget https://www.openssl.org/source/openssl-1.0.2d.tar.gz

and it saved in ~/home directory.

get into the directory where gz file is then

Un-gz the file

$ gzip -d openssl-1.0.2d.tar.gz

To unpack a tar file, type

tar -xvf openssl-1.0.2d.tar




Then after unpack it, cd into the openssl-1.0.2d directory the

cd openssl-1.0.2d

./config --prefix=/usr/

make

sudo make install







The key is in this line. It remove the local installed list (sync) from auto update server of openssl. 

apt-get autoremove && apt-get autoclean

If it not this line, after install it would still show 1.0.1f version.