Changelog (Commits)
- bump: version v5.0.7 (94d3064)
- feat: suggest HTTP and HTTPS URLs (127b04a)
- fix: broaden automatic HTTPS URL matching (2cd4cf6)
Security Verification
SHA-256 Checksums
- Lertaro-Setup.exe (x64):
b07bcc7ac712e20fb44695cbe3bd393e2d7e20e0be4051bf43a1ad134992eb5b - Lertaro-Portable.zip (x64):
3da85bc97188623ad419783af2e8c95a25a20bc4b63e1662bf4823d854adca27 - Lertaro-Setup-arm64.exe (arm64):
5954666993a9dfb44dfeb171c20da2659e6ffe32bf22b884f510b015124fdcb5 - Lertaro-Portable-arm64.zip (arm64):
12959203c38adfa03be4938fdbef441d8082e2e92585aa5cfb43710c671928fb
Signature Verification (ECDsa NistP256)
The portable ZIP release is signed using our official release key.
To verify the signature manually using OpenSSL:
# 1. Save the public key shown above to 'public_key.pem'
# 2. Run the following command:
openssl dgst -sha256 -verify public_key.pem -signature Lertaro-Portable.zip.sig Lertaro-Portable.zip
# Expected output: Verified OKTo verify the signature manually in PowerShell (.NET 5.0+):
$zipBytes = [System.IO.File]::ReadAllBytes('Lertaro-Portable.zip')
$sigBytes = [System.IO.File]::ReadAllBytes('Lertaro-Portable.zip.sig')
$ecdsa = [System.Security.Cryptography.ECDsa]::Create()
$pubKeyPem = '-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE117370jTbSPgIwHLntC+Bi3SD6gJ
QfxAySjSpUWa6zy4n0YHVv/ZWXM9zQlF2LTqpQC0iHNdJNH+MKU9UvDMTQ==
-----END PUBLIC KEY-----'
$ecdsa.ImportFromPem($pubKeyPem)
$ecdsa.VerifyData($zipBytes, $sigBytes, [System.Security.Cryptography.HashAlgorithmName]::SHA256, [System.Security.Cryptography.DSASignatureFormat]::Rfc3279DerSequence)
# Expected output: True