Packages / Debian 13 (Trixie) / net / coturn

[Source: coturn]

Package: coturn (4.6.1-2+b2)

TURN and STUN server for VoIP

Other Packages Related to coturn:

  • dep: [adduser]

    add and remove users and groups

  • dep: [sqlite3]

    Command line interface for SQLite 3

  • dep: [telnet]

    transitional dummy package for inetutils-telnet default switch

  • dep: telnet-client

    Package not available

  • dep: [libc6] (>= 2.38)

    GNU C Library: Shared libraries

  • dep: [libevent-core-2.1-7t64] (>= 2.1.8-stable)

    Asynchronous event notification library (core)

  • dep: [libevent-extra-2.1-7t64] (>= 2.1.8-stable)

    Asynchronous event notification library (extra)

  • dep: [libevent-openssl-2.1-7t64] (>= 2.1.8-stable)

    Asynchronous event notification library (openssl)

  • dep: [libevent-pthreads-2.1-7t64] (>= 2.1.8-stable)

    Asynchronous event notification library (pthreads)

  • dep: [libhiredis1.1.0] (>= 1.2.0)

    minimalistic C client library for Redis

  • dep: [libmariadb3] (>= 3.0.0)

    MariaDB database client library

  • dep: [libpq5] (>= 8.4~)

    PostgreSQL C client library

  • dep: [libsqlite3-0] (>= 3.6.0)

    SQLite 3 shared library

  • dep: [libssl3t64] (>= 3.0.0)

    Secure Sockets Layer toolkit - shared libraries

  • dep: [libsystemd0]

    systemd utility library

  • sug: sip-router

    Package not available

  • sug: xmpp-server

    Package not available

Download coturn

ArchitecturePackage sizeInstalled sizeFilesPackage
amd64353 KiB1.5 MiBlist of filesDownload
arm64336 KiB1.7 MiBlist of filesDownload

Package file paths (115)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /etc/default/coturn
  • /etc/init.d/coturn
  • /etc/turnserver.conf
  • /etc/ufw/applications.d/turnserver
  • /usr/bin/coturn
  • /usr/bin/turnadmin
  • /usr/bin/turnserver
  • /usr/bin/turnutils
  • /usr/bin/turnutils_natdiscovery
  • /usr/bin/turnutils_oauth
  • /usr/bin/turnutils_peer
  • /usr/bin/turnutils_stunclient
  • /usr/bin/turnutils_uclient
  • /usr/include/turn/ns_turn_defs.h
  • /usr/include/turn/ns_turn_ioaddr.h
  • /usr/include/turn/ns_turn_msg_addr.h
  • /usr/include/turn/ns_turn_msg_defs_experimental.h
  • /usr/include/turn/ns_turn_msg_defs.h
  • /usr/include/turn/ns_turn_msg.h
  • /usr/include/turn/TurnMsgLib.h
  • /usr/lib/libturnclient.a
  • /usr/lib/systemd/system/coturn.service
  • /usr/share/coturn/schema.mongo.sh
  • /usr/share/coturn/schema.sql
  • /usr/share/coturn/schema.stats.redis
  • /usr/share/coturn/schema.userdb.redis
  • /usr/share/coturn/testmongosetup.sh
  • /usr/share/coturn/testredisdbsetup.sh
  • /usr/share/coturn/testsqldbsetup.sql
  • /usr/share/doc-base/coturn.coturn
  • /usr/share/doc/coturn/changelog.Debian.arm64.gz
  • /usr/share/doc/coturn/changelog.Debian.gz
  • /usr/share/doc/coturn/changelog.gz
  • /usr/share/doc/coturn/copyright
  • /usr/share/doc/coturn/examples/ca/CA.pl.diff
  • /usr/share/doc/coturn/examples/ca/openssl.conf
  • /usr/share/doc/coturn/examples/ca/run.sh
  • /usr/share/doc/coturn/examples/cpu-mem.sh
  • /usr/share/doc/coturn/examples/etc/cacert.pem
  • /usr/share/doc/coturn/examples/etc/coturn.service
  • /usr/share/doc/coturn/examples/etc/turn_client_cert.pem
  • /usr/share/doc/coturn/examples/etc/turn_client_pkey.pem
  • /usr/share/doc/coturn/examples/etc/turn_server_cert.pem
  • /usr/share/doc/coturn/examples/etc/turnserver.conf
  • /usr/share/doc/coturn/examples/etc/turn_server_pkey.pem
  • /usr/share/doc/coturn/examples/run_all_clients.sh
  • /usr/share/doc/coturn/examples/run_tests.sh
  • /usr/share/doc/coturn/examples/scripts/basic/dos_attack.sh
  • /usr/share/doc/coturn/examples/scripts/basic/relay.sh
  • /usr/share/doc/coturn/examples/scripts/basic/tcp_client_c2c_tcp_relay.sh
  • /usr/share/doc/coturn/examples/scripts/basic/tcp_client.sh
  • /usr/share/doc/coturn/examples/scripts/basic/udp_c2c_client.sh
  • /usr/share/doc/coturn/examples/scripts/basic/udp_client.sh
  • /usr/share/doc/coturn/examples/scripts/loadbalance/master_relay.sh
  • /usr/share/doc/coturn/examples/scripts/loadbalance/slave_relay_1.sh
  • /usr/share/doc/coturn/examples/scripts/loadbalance/slave_relay_2.sh
  • /usr/share/doc/coturn/examples/scripts/loadbalance/tcp_c2c_tcp_relay.sh
  • /usr/share/doc/coturn/examples/scripts/loadbalance/udp_c2c.sh
  • /usr/share/doc/coturn/examples/scripts/longtermsecuredb/secure_relay_with_db_mongo.sh
  • /usr/share/doc/coturn/examples/scripts/longtermsecuredb/secure_relay_with_db_mysql.sh
  • /usr/share/doc/coturn/examples/scripts/longtermsecuredb/secure_relay_with_db_mysql_ssl.sh
  • /usr/share/doc/coturn/examples/scripts/longtermsecuredb/secure_relay_with_db_psql.sh
  • /usr/share/doc/coturn/examples/scripts/longtermsecuredb/secure_relay_with_db_redis.sh
  • /usr/share/doc/coturn/examples/scripts/longtermsecuredb/secure_relay_with_db_sqlite.sh
  • /usr/share/doc/coturn/examples/scripts/longtermsecure/secure_dos_attack.sh
  • /usr/share/doc/coturn/examples/scripts/longtermsecure/secure_dtls_client_cert.sh
  • /usr/share/doc/coturn/examples/scripts/longtermsecure/secure_dtls_client.sh
  • /usr/share/doc/coturn/examples/scripts/longtermsecure/secure_relay_cert.sh
  • /usr/share/doc/coturn/examples/scripts/longtermsecure/secure_relay.sh
  • /usr/share/doc/coturn/examples/scripts/longtermsecure/secure_sctp_client.sh
  • /usr/share/doc/coturn/examples/scripts/longtermsecure/secure_tcp_client_c2c_tcp_relay.sh
  • /usr/share/doc/coturn/examples/scripts/longtermsecure/secure_tcp_client.sh
  • /usr/share/doc/coturn/examples/scripts/longtermsecure/secure_tls_client_c2c_tcp_relay.sh
  • /usr/share/doc/coturn/examples/scripts/longtermsecure/secure_tls_client_cert.sh
  • /usr/share/doc/coturn/examples/scripts/longtermsecure/secure_tls_client.sh
  • /usr/share/doc/coturn/examples/scripts/longtermsecure/secure_udp_c2c.sh
  • /usr/share/doc/coturn/examples/scripts/longtermsecure/secure_udp_client.sh
  • /usr/share/doc/coturn/examples/scripts/mobile/mobile_dtls_client.sh
  • /usr/share/doc/coturn/examples/scripts/mobile/mobile_relay.sh
  • /usr/share/doc/coturn/examples/scripts/mobile/mobile_tcp_client.sh
  • /usr/share/doc/coturn/examples/scripts/mobile/mobile_tls_client_c2c_tcp_relay.sh
  • /usr/share/doc/coturn/examples/scripts/mobile/mobile_udp_client.sh
  • /usr/share/doc/coturn/examples/scripts/oauth.sh
  • /usr/share/doc/coturn/examples/scripts/pack.sh
  • /usr/share/doc/coturn/examples/scripts/peer.sh
  • /usr/share/doc/coturn/examples/scripts/readme.txt
  • /usr/share/doc/coturn/examples/scripts/restapi/secure_relay_secret.sh
  • /usr/share/doc/coturn/examples/scripts/restapi/secure_relay_secret_with_db_mongo.sh
  • /usr/share/doc/coturn/examples/scripts/restapi/secure_relay_secret_with_db_mysql.sh
  • /usr/share/doc/coturn/examples/scripts/restapi/secure_relay_secret_with_db_psql.sh
  • /usr/share/doc/coturn/examples/scripts/restapi/secure_relay_secret_with_db_redis.sh
  • /usr/share/doc/coturn/examples/scripts/restapi/secure_relay_secret_with_db_sqlite.sh
  • /usr/share/doc/coturn/examples/scripts/restapi/secure_udp_client_with_secret.sh
  • /usr/share/doc/coturn/examples/scripts/restapi/shared_secret_maintainer.pl
  • /usr/share/doc/coturn/examples/scripts/rfc5769.sh
  • /usr/share/doc/coturn/examples/scripts/selfloadbalance/secure_dos_attack.sh
  • /usr/share/doc/coturn/examples/scripts/selfloadbalance/secure_relay.sh
  • /usr/share/doc/coturn/examples/var/db/turndb
  • /usr/share/doc/coturn/README.Debian
  • /usr/share/doc/coturn/README.turnadmin.gz
  • /usr/share/doc/coturn/README.turnserver.gz
  • /usr/share/doc/coturn/README.turnutils.gz
  • /usr/share/doc/coturn/schema.mongo.sh
  • /usr/share/doc/coturn/schema.sql
  • /usr/share/doc/coturn/schema.stats.redis
  • /usr/share/doc/coturn/schema.userdb.redis.gz
  • /usr/share/man/man1/coturn.1.gz
  • /usr/share/man/man1/turnadmin.1.gz
  • /usr/share/man/man1/turnserver.1.gz
  • /usr/share/man/man1/turnutils.1.gz
  • /usr/share/man/man1/turnutils_natdiscovery.1.gz
  • /usr/share/man/man1/turnutils_oauth.1.gz
  • /usr/share/man/man1/turnutils_peer.1.gz
  • /usr/share/man/man1/turnutils_stunclient.1.gz
  • /usr/share/man/man1/turnutils_uclient.1.gz

Field source: Debian 13 (Trixie) main arm64

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try Debian 13 (Trixie) in the browserBuild an image that includes coturn

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
4.6.1-2+b2trixie / mainarm64Debian 13 · main · arm64336 KiB1.7 MiBpool/main/c/coturn/coturn_4.6.1-2+b2_arm64.deb
4.6.1-2trixie / mainamd64Debian 13 · main · amd64353 KiB1.5 MiBpool/main/c/coturn/coturn_4.6.1-2_amd64.deb

Field source: Debian 13 (Trixie) main arm64

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVESeverityVersion impact
[CVE-2026-104074]

Published:

Coturn 4.10.0 contains an uninitialized memory disclosure vulnerability that allows remote unauthenticated attackers to leak stack memory contents by sending a TURN Allocate request without credential

Medium(6.9)Affected
Details (2)

  • 4.6.1-2 · amd64 · trixie

    Affected

    nvd · coturn · debian · 13

  • 4.6.1-2+b2 · arm64 · trixie

    Affected

    nvd · coturn · debian · 13

[CVE-2026-68555]

Published:

Coturn is a free open source implementation of TURN and STUN Server. In 4.15.0, an authenticated TURN user can repeatedly resume one allocation from fresh UDP 5-tuples without completing a handoff whe

Medium(6.5)Affected
Details (2)

  • 4.6.1-2 · amd64 · trixie

    Affected

    nvd · coturn · debian · 13

  • 4.6.1-2+b2 · arm64 · trixie

    Affected

    nvd · coturn · debian · 13

[CVE-2026-68552]

Published:

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an unauthenticated remote client can send a STUN message over TCP or TLS with a body-length field from 65520 throu

Medium(5.3)Affected
Details (2)

  • 4.6.1-2 · amd64 · trixie

    Affected

    nvd · coturn · debian · 13

  • 4.6.1-2+b2 · arm64 · trixie

    Affected

    nvd · coturn · debian · 13

[CVE-2026-68554]

Published:

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an on-path attacker can append attributes after MESSAGE-INTEGRITY to an authenticated STUN request on plain UDP or

Medium(5.4)Affected
Details (2)

  • 4.6.1-2 · amd64 · trixie

    Affected

    nvd · coturn · debian · 13

  • 4.6.1-2+b2 · arm64 · trixie

    Affected

    nvd · coturn · debian · 13

[CVE-2026-68553]

Published:

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.0, an authenticated TURN user can place printf-style format specifiers in the STUN USERNAME or REALM attribute, which

High(7.1)Affected
Details (2)

  • 4.6.1-2 · amd64 · trixie

    Affected

    nvd · coturn · debian · 13

  • 4.6.1-2+b2 · arm64 · trixie

    Affected

    nvd · coturn · debian · 13

[CVE-2026-73216]

Published:

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, shutdown_client_connection() in src/server/ns_turn_server.c prematurely calls dec_quota() and releases bandwidth a

Medium(6.5)Affected
Details (2)

  • 4.6.1-2 · amd64 · trixie

    Affected

    nvd · coturn · debian · 13

  • 4.6.1-2+b2 · arm64 · trixie

    Affected

    nvd · coturn · debian · 13

[CVE-2026-73215]

Published:

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, turnports_allocate_even() in src/apps/relay/turn_ports.c marks the unused odd sibling port as TPS_TAKEN_ODD for an

High(7.1)Affected
Details (2)

  • 4.6.1-2 · amd64 · trixie

    Affected

    nvd · coturn · debian · 13

  • 4.6.1-2+b2 · arm64 · trixie

    Affected

    nvd · coturn · debian · 13

[CVE-2026-73214]

Published:

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, dtls_server_input_handler() and create_new_connected_udp_socket() in src/apps/relay/dtls_listener.c retain OpenSSL

High(8.2)Affected
Details (2)

  • 4.6.1-2 · amd64 · trixie

    Affected

    nvd · coturn · debian · 13

  • 4.6.1-2+b2 · arm64 · trixie

    Affected

    nvd · coturn · debian · 13

[CVE-2026-73213]

Published:

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, addr_less_eq() in src/client/ns_turn_ioaddr.c uses a component-wise comparison for native IPv6 min-max intervals i

Critical(9.9)Affected
Details (2)

  • 4.6.1-2 · amd64 · trixie

    Affected

    nvd · coturn · debian · 13

  • 4.6.1-2+b2 · arm64 · trixie

    Affected

    nvd · coturn · debian · 13

[CVE-2026-73212]

Published:

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.1, good_peer_addr() in src/server/ns_turn_server.c uses ioa_addr_in_range() in src/client/ns_turn_ioaddr.c without ca

High(7.7)Affected
Details (2)

  • 4.6.1-2 · amd64 · trixie

    Affected

    nvd · coturn · debian · 13

  • 4.6.1-2+b2 · arm64 · trixie

    Affected

    nvd · coturn · debian · 13

[CVE-2026-65981]

Published:

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, a server using --mobility authenticates a resumed REFRESH request with the resuming user's credentials but does no

High(7.1)Affected
Details (2)

  • 4.6.1-2 · amd64 · trixie

    Affected

    nvd · coturn · debian · 13

  • 4.6.1-2+b2 · arm64 · trixie

    Affected

    nvd · coturn · debian · 13

[CVE-2026-62959]

Published:

Coturn is a free open source implementation of TURN and STUN Server. From 4.5.2 through 4.14.0, when Coturn is started with --acme-redirect <URL> and exposes a plaintext-TCP listener, an unauthenticat

High(8.2)Affected
Details (2)

  • 4.6.1-2 · amd64 · trixie

    Affected

    nvd · coturn · debian · 13

  • 4.6.1-2+b2 · arm64 · trixie

    Affected

    nvd · coturn · debian · 13

[CVE-2026-53450]

Published:

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.0, coturn rejects loopback peers by default unless allow-loopback-peers is enabled, but the default loopback guard ca

High(7.4)Affected
Details (2)

  • 4.6.1-2 · amd64 · trixie

    Affected

    nvd · coturn · debian · 13

  • 4.6.1-2+b2 · arm64 · trixie

    Affected

    nvd · coturn · debian · 13

[CVE-2026-53449]

Published:

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.0, the psd print sessions dump CLI command in coturn takes a filename argument and directly passes it to fopen with n

Medium(6)Affected
Details (2)

  • 4.6.1-2 · amd64 · trixie

    Affected

    nvd · coturn · debian · 13

  • 4.6.1-2+b2 · arm64 · trixie

    Affected

    nvd · coturn · debian · 13

[CVE-2026-53448]

Published:

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.12.0, the coturn HTTPS admin panel passes HTTP query parameters directly into SQL queries via snprintf string interpolat

High(7.2)Affected
Details (2)

  • 4.6.1-2 · amd64 · trixie

    Affected

    nvd · coturn · debian · 13

  • 4.6.1-2+b2 · arm64 · trixie

    Affected

    nvd · coturn · debian · 13

[CVE-2026-43994]

Published:

Coturn is a free open source implementation of TURN and STUN Server. Versions prior to 4.10.0 contain a stack buffer overflow in decode_oauth_token_gcm(). A uint16_t nonce_len field read from an attac

Critical(9.8)Affected
Details (2)

  • 4.6.1-2 · amd64 · trixie

    Affected

    nvd · coturn · debian · 13

  • 4.6.1-2+b2 · arm64 · trixie

    Affected

    nvd · coturn · debian · 13

[CVE-2026-43915]

Published:

Coturn is a free open source implementation of TURN and STUN Server. Versions prior to 4.11.0 contain a stored cross-site scripting (XSS) vulnerability in the web-admin HTTPS interface. An attacker wh

Medium(5.4)Affected
Details (2)

  • 4.6.1-2 · amd64 · trixie

    Affected

    nvd · coturn · debian · 13

  • 4.6.1-2+b2 · arm64 · trixie

    Affected

    nvd · coturn · debian · 13

[CVE-2026-40613]

Published:

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.10.0, the STUN/TURN attribute parsing functions in coturn perform unsafe pointer casts from uint8_t * to uint16_t * with

High(7.5)Affected
Details (2)

  • 4.6.1-2 · amd64 · trixie

    Affected

    nvd · coturn · debian · 13

  • 4.6.1-2+b2 · arm64 · trixie

    Affected

    nvd · coturn · debian · 13

[CVE-2026-27624]

Published:

Coturn is a free open source implementation of TURN and STUN Server. Coturn is commonly configured to block loopback and internal ranges using "denied-peer-ip" and/or default loopback restrictions. CV

High(7.2)Affected
Details (2)

  • 4.6.1-2 · amd64 · trixie

    Affected

    nvd · coturn · debian · 13

  • 4.6.1-2+b2 · arm64 · trixie

    Affected

    nvd · coturn · debian · 13

Fixed and unaffected versions (1)
CVESeverityVersion impact
[CVE-2020-26262]

Published:

coturn: CVE-2020-26262

High(7.2)Fixed
Details (2)

  • 4.6.1-2 · amd64 · trixie

    Fixed · Fixed: 4.5.2-1

    dsa · coturn · debian · 13

  • 4.6.1-2+b2 · arm64 · trixie

    Fixed · Fixed: 4.5.2-1

    dsa · coturn · debian · 13

[Next results]

Last synced:

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

4.6.1-2+b2 / arm64Observed Sep 1, 2026sha256 3a72ae84ff2c…337cc7feSource-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): 3a72ae84ff2c133743636a679b4e2025eb6e2bcc236cffe9c79eb338337cc7fe

Verify download

printf '%s %s\n' '3a72ae84ff2c133743636a679b4e2025eb6e2bcc236cffe9c79eb338337cc7fe' 'coturn_4.6.1-2+b2_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main arm64

4.6.1-2 / amd64Observed Sep 1, 2026sha256 cb55194d0118…a22612e0Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): cb55194d0118d26035aa39aa7306fd810a47069643266724357e8da2a22612e0

Verify download

printf '%s %s\n' 'cb55194d0118d26035aa39aa7306fd810a47069643266724357e8da2a22612e0' 'coturn_4.6.1-2_amd64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main amd64

Sources

  • Debian 13 (Trixie) main amd64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signature evidence

    trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Observed SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Result
    match verified
  • Debian 13 (Trixie) main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signature evidence

    trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Observed SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Result
    match verified