Introduction
This article explains how to download signed log files and check their integrity from the user interface. The page is at Settings > Data Management > Signed and opens with the title Signed Logs.
Signed Logs
Signed logs are stored under the /opt/var/log/signed directory in Year/Month/Day folders. Each log file is compressed as a Bzip2 (.bz2) file. The page shows these folders as a tree.
Next to each file there is a Download button that also shows the file size. Use it to download the compressed raw log file.
Validation
Before you start, select the hash methods at the top of the page. File Sign Method (default SHA-256) is used for the log file and Summary Sign Method (default MD5) is used for its summary file. The options are SHA-1, SHA-256, MD5 and Mikrokep. Select the same methods that were active in Settings > Data Management > Sign Settings when the file was signed. If the methods are different, the check fails even when the file is intact.
Click Validate next to a file and confirm the message. Two checks run:
- File check: the hash of the compressed log file is calculated again and compared with the hash stored when the file was signed (.calculated_hash file).
- Summary file check: the same comparison is made for the summary file of the log file (.summary).
The output appears in a terminal panel below the file tree. Each check is reported as OK or FAIL. Only one validation can run at a time. Large files can take a while.