info-cvs
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: MD5sums in release announcements (was Re: Stable CVS Version 1.11.17


From: Mark D. Baushke
Subject: Re: MD5sums in release announcements (was Re: Stable CVS Version 1.11.17 Released! <strong>(security update)</strong>)
Date: Wed, 09 Jun 2004 12:20:36 -0700

Max Bowsher <address@hidden> writes:

> Derek Robert Price wrote:
> > I am no longer including MD5 sums in the release announcements since I
> > am now posting a detached GPG signature file with the downloads.
> 
> Let's hope it never happens again, but, during the recent cvshome.org
> outage, the md5sums in the release announcements were *extremely*
> useful.

Agreed.

> The release announcement emails had been independently archived by
> several different mail archives, thereby providing a reliable source
> of the true md5sum. When people began to put up their downloaded cvs
> tarballs on various sites, this md5sum was extremely valuable in
> verifying that these second-hand tarballs were truly the real release.

The extra step is to ensure that you now download both the original and
the .sig files and do the verification that way... assuming that Derek's
key is not compromised somewhere along the line.

Derek used the 0x17F231A4 DSA key with a
Primary key fingerprint: CB6A 07CA 90C5 4234 E8A3  C8D0 2C3D 4E4C 17F2 31A4

> If it doesn't create too much work for you, perhaps you could
> reconsider this decision?

I have created a Checksums.asc file for the site which I have uploaded.
A copy of it is here for archive purposes...

        Enjoy!
        -- Mark

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Here are the MD5 and SHA1 checksums of the recently released files.

MD5(cederqvist-1.11.17.html.bz2)= d3d60359922d4e7f8a5776703620581e
MD5(cederqvist-1.11.17.html.tar.bz2)= 375e11766de80eb1fd1256abc132b3a8
MD5(cederqvist-1.11.17.pdf)= 361faa49ebb62c8f22c12b0a2594454f
MD5(cederqvist-1.11.17.ps)= 1b67e454af56a408f16a665ab36e6035
MD5(cvs-1.11.16-1.11.17.diff.bz2)= d4da5f9d719851eb8d232363696c3d8b
MD5(cvs-1.11.17.tar.bz2)= 17cd48888d5571d215a44a7e8d46759c
MD5(cvs-1.11.17.tar.bz2.sig)= 0f8a6f01c5e281924fb8a91cd060ebb9
MD5(cvs-1.11.17.tar.gz)= fdd21575773c65b0ab83f7a00d584cb3
MD5(cvs-1.11.17.tar.gz.sig)= c3e63089712d9671c1393ed04dd244d0

MD5(cederqvist-1.12.9.html.bz2)= 35c62adf818d2993a83ef4f39e236e49
MD5(cederqvist-1.12.9.html.tar.bz2)= b49e2f478e7215cff6bc4db025188e98
MD5(cederqvist-1.12.9.pdf)= 56049b827724b1570bf5b2364fd34186
MD5(cederqvist-1.12.9.ps)= d1d2ab22b32bcb77cf07fcb3be7ac40d
MD5(cvs-1.11.9.tar.bz2)= 0e72f5de87f66c5fcd27d58b53fcbf43
MD5(cvs-1.12.8-1.12.9.diff.bz2)= 33308c8a7a9c21c2b397c5d0eed497de
MD5(cvs-1.12.9.tar.bz2)= 41396dfe38c3c9f80de98ea53e6d55aa
MD5(cvs-1.12.9.tar.bz2.sig)= 54f0d4dd80504daa7f74a9a16e62029e
MD5(cvs-1.12.9.tar.gz)= 3ff13f64f41598e248a66bb8a8e2c38d
MD5(cvs-1.12.9.tar.gz.sig)= f54e97e995afde04e8e7e9d1239c5090

MD5(README)= 761c793aa5ef80e213eb60c15af61395

SHA1(cederqvist-1.11.17.html.bz2)= 70873c06a0541ed6973a29b0b10950ae48851bc9
SHA1(cederqvist-1.11.17.html.tar.bz2)= 3bf893d704826b8b627b3d5e9e9f815585487806
SHA1(cederqvist-1.11.17.pdf)= af61d5a1bd4b50a4bb6e958cfdf3da94d83eabb0
SHA1(cederqvist-1.11.17.ps)= aea381bfd047a657bf911b36a528eece646c8358
SHA1(cvs-1.11.16-1.11.17.diff.bz2)= 0b11145721f926de7ea8a91f3b3e2a12e713ccc4
SHA1(cvs-1.11.17.tar.bz2)= d64282e744424ec7c5f92b66e78e5a6fded90ff9
SHA1(cvs-1.11.17.tar.bz2.sig)= 949fdfb326ed7e9b4ce781967cfcf4a8ed9401a3
SHA1(cvs-1.11.17.tar.gz)= 554d45fcf6be289c0f9fb9eebeca5d8fabee1dd4
SHA1(cvs-1.11.17.tar.gz.sig)= 55e3ab2649e6004f09110761e64972c140dbfb9e

SHA1(cederqvist-1.12.9.html.bz2)= b75799bde9d67d29f866fc054ee776b1e63e5199
SHA1(cederqvist-1.12.9.html.tar.bz2)= 38b45a56325a7f6d3a66654dcf7c805020d634f3
SHA1(cederqvist-1.12.9.pdf)= 5a3fcee95e991ad853404f253c2d29e978233bcb
SHA1(cederqvist-1.12.9.ps)= 37f0283bd3c1352130f7a9bd8fe11e31cbffc14e
SHA1(cvs-1.11.9.tar.bz2)= e8effce702a069e6f78bd89ac1eaff0d9420a7fc
SHA1(cvs-1.12.8-1.12.9.diff.bz2)= fadf58cd460d826b23786ebb526ff8ed5811a8ff
SHA1(cvs-1.12.9.tar.bz2)= 96ed8acec12f2f6198cda8278dc84703b48b0ef6
SHA1(cvs-1.12.9.tar.bz2.sig)= 71c988ea464e6d50d851133912814b04ca257b9e
SHA1(cvs-1.12.9.tar.gz)= 7c1fa4e44c022635b3d201967a9c1f67df8bbc3f
SHA1(cvs-1.12.9.tar.gz.sig)= 54efaafe3ff592ce5687e3445d2690d51322df4b

SHA1(README)= 5d8144b5d393996914db82fede5f0e4bc0690bef
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (FreeBSD)

iD8DBQFAx2Gn3x41pRYZE/gRAoDjAJ9dlLobGKKrSo5pemQRb1sLrW9sOQCgpIKf
uwFCe73AQLrylVT+FPhaQPs=
=Bccq
-----END PGP SIGNATURE-----




reply via email to

[Prev in Thread] Current Thread [Next in Thread]