On Tue, Mar 26, 2013 at 6:40 AM, Pedro <pedl...@gmail.com> wrote:
> C. H. D. for LibreOffice QA wrote
>> Recently, I downloaded the daily build for testing. However, I cannot find
>> the _sha1sum_ or _sha512sum_ values for checking the file.
>
> To my knowledge this project does not include any MD5 or SHA keys in any
> folder.
> Not even for the stable builds. If there are, I never found them :)

Information for both stable (and some testing) builds is available for
files distributed through MirrorBrain:
http://download.documentfoundation.org/libreoffice/

For example:
http://download.documentfoundation.org/libreoffice/testing/4.0.2/deb/x86/LibreOffice_4.0.2.1_Linux_x86_deb.tar.gz.mirrorlist

That page lists:
---
Size: 164M (171863423 bytes)
Last modified: Thu, 14 Mar 2013 11:32:33 GMT (Unix time: 1363260753)
SHA-256 Hash: 029d77147f66131fea994fe4222b6a714e7d3cd1a1b493ff82619f1a8b4669d2
SHA-1 Hash: f900415c905d425ea354f9ec0f1be030379e9dc6
MD5 Hash: ef3894f2d7c4f09a8658ba62ec25ce28
BitTorrent Information Hash: 7060eac9c528c8513c8946b7272a77e445b2c5aa
PGP signature available
---


> Since you are downloading from the TDF server it is considered to be safe.
> Of course this does not help to verify if there were transmission errors...

Indeed. Adding sha1sums/signatures to dailies could be a good
candidate for an improvement. I believe that some/all of these builds
are generated on non-TDF-controlled machines, so one would still have
to trust the owners of said machines...

--R
_______________________________________________
List Name: Libreoffice-qa mailing list
Mail address: Libreoffice-qa@lists.freedesktop.org
Change settings: http://lists.freedesktop.org/mailman/listinfo/libreoffice-qa
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://lists.freedesktop.org/archives/libreoffice-qa/

Reply via email to