Hi, I recently tested a new way of checking checksums of different mirrors, I call to an ISP in France (from Germany) in order to pull the MD5 and checksum files from a list of mirrors. I then cross-check these with my ISP's openbsd mirror. The process I can automate a little better but it seems to work.
data: -rw-r--r-- 1 root wheel 3775 Jan 9 12:10 129.128.5.191.cksums -rw-r--r-- 1 root wheel 3775 Jan 9 12:10 130.237.237.229.cksums -rw-r--r-- 1 root wheel 3777 Jan 9 12:10 131.188.40.91.cksums -rw-r--r-- 1 root wheel 3777 Jan 9 12:10 192.43.244.161.cksums -rw-r--r-- 1 root wheel 3648 Jan 9 12:10 200.32.4.56.cksums -rw-r--r-- 1 root wheel 3648 Jan 9 12:10 203.16.234.85.cksums -rw-r--r-- 1 root wheel 3648 Jan 9 12:10 203.16.234.86.cksums -rw-r--r-- 1 root wheel 3648 Jan 9 12:10 203.8.116.111.cksums -rw-r--r-- 1 root wheel 3777 Jan 9 12:10 204.152.184.203.cksums -rw-r--r-- 1 root wheel 3777 Jan 9 12:10 209.242.32.10.cksums -rw-r--r-- 1 root wheel 3648 Jan 9 12:10 62.116.6.182.cksums -rw-r--r-- 1 root wheel 3778 Jan 9 11:54 ftp.freenet.de.cksums At that point (if you look at the timestamp) it's been 4 hours since the OpenBSD main source did a change in the kernel versions and all the other mirrors hadn't picked up the changes. So there was a checksum mismatch. I was wondering whether a history file of checksums is a good thing to include on the main ftp site? That way one can check whether older revisions of binaries are the right checksum? Otherwise one would not know (and there would be no point of checksums then right?). Perhaps there is a better way to check checksums in a more secure way than FTP? What way would this be, at best? My calls to France hope to at least find some out of band channel to cross-check binary checksums, but it's not economical until I update my long-distance phone plan (I'm just testing the water right now). Regards, -peter -- Here my ticker tape .signature #### My name is Peter Philipp #### lynx -dump "http://en.wikipedia.org/w/index.php?title=Pufferfish&oldid=20768394"; | sed -n 131,137p #### http://centroid.eu #### So long and thanks for all the fish!!!
