Re: F12 Live CHECKSUM failing

[Todd Zullinger]

Sawrub wrote:
> I don't see that al this a problem of torrent . As mentioned earlier
> [though i'm still confused] its some issue in the signing of the
> ISO. let me give a try creating the boot-able USB under windows.

No, the problem is that your download is not complete.  You stated
earlier:

> [saw...@mybox Fedora-12-x86_64-Live]$ sha256sum -c *-CHECKSUM
> Fedora-12-x86_64-Live.iso: FAILED
> sha256sum: WARNING: 1 of 1 computed checksum did NOT match

This shows that your download is not complete.  You need to fix that
and get an iso that passes the sha256sum check.

-- 
ToddOpenPGP -> KeyID: 0xBEAF0CE3 | URL: www.pobox.com/~tmz/pgp
~~
Would you let the aliens land, please?  They might be here to pick me
up.
-- Bill Hicks



pgpV4SfGAPfup.pgp
Description: PGP signature
-- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

Re: F12 Live CHECKSUM failing

[Sawrub]

On 12/19/2009 09:22 PM, Gene Heskett wrote:

On Saturday 19 December 2009, Robert G. (Doc) Savage wrote:
   

On Sat, 2009-12-19 at 01:24 -0500, Gene Heskett wrote:
 

Ktorrent hangs in there till somebody starts seeding what it needs, but I
have very very little experience with the others so can't say what they
do.

I have seen the seed count goto zero a couple of times, but when I got up
the next morning, it had the file and was seeding it.
   

Gene,

In this case a better alternative to torrent would probably be rsync,
especially since you probably have 99.99% of the right bits. The Fedora
downloads site doesn't support rsync, but lots of its mirrors do.

rsync's command line options can be a bit imposing if you haven't used
it before. From your Fedora-12-x86_64-Live directory, type and run the
following command line (this is long and may wrap, but it's all one line
including the trailing " .").

$ rsync -acvzP
rsync://rsync.gtlib.gatech.edu/fedora-enchilada/linux/releases/12/Live/x86_
64/Fedora-12-x86_64-Live.iso .

This will do a block-by-block comparison of a known good source file at
the Georgia Tech mirror against your local copy. It will replace any
local blocks that don't match those on the mirror. It should only take
rsync a very few minutes to repair your iso file.

HTH

--Doc Savage
  Fairview Heights, IL
 

Its my understanding that restarting the torrent will do the same thing,
without needed the drive space for the 2nd copy of the file.  Both use
checksums over the individual 64k block of data, with rsync copying the data
locally to the 2nd file if they match, whereas torrent will replace the
defective 64k block insitu with the net fetch if the local is bad.  I would
imagine that the rsync times could be calculated to be a very small amount
longer due to the copying involved, but OTOH, connection latencies might
swamp that out.

We have about a foot of white stuff here&  still coming down.  Here being WV,
about 100 miles north of Charleston on I-79.

   
I don't see that al this a problem of torrent . As mentioned earlier 
[though i'm still confused] its some issue in the signing of the ISO. 
let me give a try creating the boot-able USB under windows.


--
Saurabh Sharma
Linux user number: 490644
http://sawrub-blog.blogspot.com/
Open your doors...It's time to look beyond Windows

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

Re: F12 Live CHECKSUM failing

[Gene Heskett]

On Saturday 19 December 2009, Robert G. (Doc) Savage wrote:
>On Sat, 2009-12-19 at 01:24 -0500, Gene Heskett wrote:
>> Ktorrent hangs in there till somebody starts seeding what it needs, but I
>> have very very little experience with the others so can't say what they
>> do.
>>
>> I have seen the seed count goto zero a couple of times, but when I got up
>> the next morning, it had the file and was seeding it.
>
>Gene,
>
>In this case a better alternative to torrent would probably be rsync,
>especially since you probably have 99.99% of the right bits. The Fedora
>downloads site doesn't support rsync, but lots of its mirrors do.
>
>rsync's command line options can be a bit imposing if you haven't used
>it before. From your Fedora-12-x86_64-Live directory, type and run the
>following command line (this is long and may wrap, but it's all one line
>including the trailing " .").
>
>$ rsync -acvzP
>rsync://rsync.gtlib.gatech.edu/fedora-enchilada/linux/releases/12/Live/x86_
>64/Fedora-12-x86_64-Live.iso .
>
>This will do a block-by-block comparison of a known good source file at
>the Georgia Tech mirror against your local copy. It will replace any
>local blocks that don't match those on the mirror. It should only take
>rsync a very few minutes to repair your iso file.
>
>HTH
>
>--Doc Savage
>  Fairview Heights, IL

Its my understanding that restarting the torrent will do the same thing, 
without needed the drive space for the 2nd copy of the file.  Both use 
checksums over the individual 64k block of data, with rsync copying the data 
locally to the 2nd file if they match, whereas torrent will replace the 
defective 64k block insitu with the net fetch if the local is bad.  I would 
imagine that the rsync times could be calculated to be a very small amount 
longer due to the copying involved, but OTOH, connection latencies might 
swamp that out.

We have about a foot of white stuff here & still coming down.  Here being WV, 
about 100 miles north of Charleston on I-79.

-- 
Cheers, Gene
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
The NRA is offering FREE Associate memberships to anyone who wants them.


"Remember, extremism in the nondefense of moderation is not a virtue."
-- Peter Neumann, about usenet

-- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

Re: F12 Live CHECKSUM failing

[Robert G. (Doc) Savage]

On Sat, 2009-12-19 at 01:24 -0500, Gene Heskett wrote:
> Ktorrent hangs in there till somebody starts seeding what it needs, but I 
> have very very little experience with the others so can't say what they do.
> 
> I have seen the seed count goto zero a couple of times, but when I got up the 
> next morning, it had the file and was seeding it.

Gene,

In this case a better alternative to torrent would probably be rsync,
especially since you probably have 99.99% of the right bits. The Fedora
downloads site doesn't support rsync, but lots of its mirrors do.

rsync's command line options can be a bit imposing if you haven't used
it before. From your Fedora-12-x86_64-Live directory, type and run the
following command line (this is long and may wrap, but it's all one line
including the trailing " .").

$ rsync -acvzP
rsync://rsync.gtlib.gatech.edu/fedora-enchilada/linux/releases/12/Live/x86_64/Fedora-12-x86_64-Live.iso
 .

This will do a block-by-block comparison of a known good source file at
the Georgia Tech mirror against your local copy. It will replace any
local blocks that don't match those on the mirror. It should only take
rsync a very few minutes to repair your iso file.

HTH

--Doc Savage
  Fairview Heights, IL

-- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

Re: F12 Live CHECKSUM failing

[Gene Heskett]

On Friday 18 December 2009, Tim wrote:
>Tim:
>>> One of their prior posts said they got it using a torrent.
>
>Gene Heskett:
>> In which case they should restart the torrent.  Most clients do a full
>> check and will re-pull anything that doesn't pass that 64kb blocks
>> crc.
>
>One thing that sprang to my mind, would be whether the torrent hadn't
>finished downloading, and had simply stopped because there wasn't any
>more seeds, at the time.

Ktorrent hangs in there till somebody starts seeding what it needs, but I 
have very very little experience with the others so can't say what they do.

I have seen the seed count goto zero a couple of times, but when I got up the 
next morning, it had the file and was seeding it.

-- 
Cheers, Gene
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
The NRA is offering FREE Associate memberships to anyone who wants them.


Whether weary or unweary, O man, do not rest,
Do not cease your single-handed struggle.
Go on, do not rest.
-- An old Gujarati hymn

-- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

Re: F12 Live CHECKSUM failing

[Tim]

Tim:
>> One of their prior posts said they got it using a torrent.

Gene Heskett:
> In which case they should restart the torrent.  Most clients do a full
> check and will re-pull anything that doesn't pass that 64kb blocks
> crc.

One thing that sprang to my mind, would be whether the torrent hadn't
finished downloading, and had simply stopped because there wasn't any
more seeds, at the time.

-- 
[...@localhost ~]$ uname -r
2.6.27.25-78.2.56.fc9.i686

Don't send private replies to my address, the mailbox is ignored.  I
read messages from the public lists.



-- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

Re: F12 Live CHECKSUM failing

[suvayu ali]

2009/12/18 Gene Heskett :
> On Friday 18 December 2009, Tim wrote:
>>On Fri, 2009-12-18 at 11:53 -0800, suvayu ali wrote:
>>> This shows that your download is corrupted. That would explain all
>>> your other problems too. You need to download the iso again. If you
>>> are using direct download, I would suggest you to switch to torrent.
>>> While downloading torrents, your torrent client (e.g. transmission or
>>> ktorrent) checks for the checksums of each piece, so corrupted
>>> downloads are very rare.
>>
>>One of their prior posts said they got it using a torrent.
>>

Sorry I had missed that part.

> In which case they should restart the torrent.  Most clients do a full check
> and will re-pull anything that doesn't pass that 64kb blocks crc.
>

Restarting the torrent is probably the best bet here. AFAIR there is
an option to verify too. Maybe the OP can try that, if the client
finds errors then it will re-download the corrupted pieces.
-- 
Suvayu

Open source is the future. It sets us free.

-- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

Re: F12 Live CHECKSUM failing

[Gene Heskett]

On Friday 18 December 2009, Tim wrote:
>On Fri, 2009-12-18 at 11:53 -0800, suvayu ali wrote:
>> This shows that your download is corrupted. That would explain all
>> your other problems too. You need to download the iso again. If you
>> are using direct download, I would suggest you to switch to torrent.
>> While downloading torrents, your torrent client (e.g. transmission or
>> ktorrent) checks for the checksums of each piece, so corrupted
>> downloads are very rare.
>
>One of their prior posts said they got it using a torrent.
>
In which case they should restart the torrent.  Most clients do a full check 
and will re-pull anything that doesn't pass that 64kb blocks crc.

-- 
Cheers, Gene
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
The NRA is offering FREE Associate memberships to anyone who wants them.


I have yet to see any problem, however complicated, which, when
you looked at it in the right way, did not become still more complicated.
-- Poul Anderson

-- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

Re: F12 Live CHECKSUM failing

[Tim]

On Fri, 2009-12-18 at 11:53 -0800, suvayu ali wrote:
> This shows that your download is corrupted. That would explain all
> your other problems too. You need to download the iso again. If you
> are using direct download, I would suggest you to switch to torrent.
> While downloading torrents, your torrent client (e.g. transmission or
> ktorrent) checks for the checksums of each piece, so corrupted
> downloads are very rare.

One of their prior posts said they got it using a torrent.

-- 
[...@localhost ~]$ uname -r
2.6.27.25-78.2.56.fc9.i686

Don't send private replies to my address, the mailbox is ignored.  I
read messages from the public lists.



-- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

Re: F12 Live CHECKSUM failing

[suvayu ali]

Hi Saurabh,

2009/12/18 Sawrub :
> On 12/18/2009 12:29 AM, Suvayu Ali wrote:
>> In addition to what Rick mentioned in another post, your command is
>> missing a flag. It should be,
>>
>> $ sha256sum -c *-CHECKSUM
>>
> Executed that also now as a part of other commands,  but still in vain.
>
> [saw...@mybox Fedora-12-x86_64-Live]$ sha256sum -c *-CHECKSUM
> Fedora-12-x86_64-Live.iso: FAILED
> sha256sum: WARNING: 1 of 1 computed checksum did NOT match
> [saw...@mybox Fedora-12-x86_64-Live]$
>
> Is this a bug that needs to be solved.?
>

This shows that your download is corrupted. That would explain all
your other problems too. You need to download the iso again. If you
are using direct download, I would suggest you to switch to torrent.
While downloading torrents, your torrent client (e.g. transmission or
ktorrent) checks for the checksums of each piece, so corrupted
downloads are very rare.

GL
-- 
Suvayu

Open source is the future. It sets us free.

-- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

Re: F12 Live CHECKSUM failing

[Sawrub]

On 12/18/2009 12:29 AM, Suvayu Ali wrote:

On Thursday 17 December 2009 10:21 AM, Sawrub wrote:

On 12/17/2009 11:50 PM, Richard Shaw wrote:

Well, I'm not going to say that the above is not a problem as I saw
the same thing when using the same steps, however, nothing you have
done so far has anything to do directly with the ISO. That doesn't
happen until you do:

sha256sum *-CHECKSUM

Here is the rest of the step.
[saw...@mybox Fedora-12-x86_64-Live]$ sha256sum *-CHECKSUM
3b74f72a6ad75eb8dc849503e9e76569bec37b5677847f98659120f1072c7944
Fedora-12-x86_64-Live-CHECKSUM


In addition to what Rick mentioned in another post, your command is 
missing a flag. It should be,


$ sha256sum -c *-CHECKSUM


Executed that also now as a part of other commands,  but still in vain.

[saw...@mybox Fedora-12-x86_64-Live]$ sha256sum -c *-CHECKSUM
Fedora-12-x86_64-Live.iso: FAILED
sha256sum: WARNING: 1 of 1 computed checksum did NOT match
[saw...@mybox Fedora-12-x86_64-Live]$

Is this a bug that needs to be solved.?

--
Saurabh Sharma
Linux user number: 490644
http://sawrub-blog.blogspot.com/
Open your doors...It's time to look beyond Windows

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

Re: F12 Live CHECKSUM failing

[Sawrub]

On 12/18/2009 12:08 AM, Rick Stevens wrote:

On 12/17/2009 10:20 AM, Richard Shaw wrote:
On Thu, Dec 17, 2009 at 12:03 PM, Sawrub  
wrote:
I downloaded the Fedora-12-x86_64-Live.iso using the torrent client, 
taking

the torrent from
http://torrent.fedoraproject.org/torrents//Fedora-12-x86_64-Live.torrent. 

But the creation of bootable USB was not possible as the iso 
verification

failed message came up in the USB creator.
Verifying the iso following the steps at
'https://fedoraproject.org/en/verify' also resulted in vain. Please 
help me

so that the b/w does not goes wasted.

[saw...@mybox Fedora-12-x86_64-Live]$ ll
total 671756
-rw-rw-r--  1 sawrub sawrub   966 2009-12-17 22:34
Fedora-12-x86_64-Live-CHECKSUM
-rwxr-xr-x. 1 sawrub sawrub 687865856 2009-12-03 00:18
Fedora-12-x86_64-Live.iso
-rwxr-xr-x. 1 sawrub sawrub   152 2009-12-02 23:50 README-SOURCES

[saw...@mybox Fedora-12-x86_64-Live]$ curl
https://fedoraproject.org/static/fedora.gpg | gpg --import
  % Total% Received % Xferd  Average Speed   TimeTime Time
  Current
 Dload  Upload   Total   Spent
Left  Speed
100  9323  100  93230 0   4396  0  0:00:02  0:00:02 
--:--:--

  8696
gpg: key 4EBFC273: "Fedora (10)" not changed
gpg: key 0B86274E: "Fedora (10 testing)" not
changed
gpg: key D22E77F2: "Fedora (11)" not changed
gpg: key 57BBCCBA: "Fedora (12)" not changed
gpg: key 217521F6: "Fedora EPEL" not changed
gpg: Total number processed: 5
gpg:  unchanged: 5

[saw...@mybox Fedora-12-x86_64-Live]$ gpg --verify *-CHECKSUM
gpg: Signature made Tue 10 Nov 2009 01:26:40 AM IST using RSA key ID
57BBCCBA
gpg: Good signature from "Fedora (12)"
gpg: WARNING: This key is not certified with a trusted signature!
gpg:  There is no indication that the signature belongs to the
owner.
Primary key fingerprint: 6BF1 78D2 8A78 9C74 AC0D  C63B 9D1C C348 
57BB CCBA

[saw...@mybox Fedora-12-x86_64-Live]$


Well, I'm not going to say that the above is not a problem as I saw
the same thing when using the same steps, however, nothing you have
done so far has anything to do directly with the ISO. That doesn't
happen until you do:

sha256sum *-CHECKSUM

When I actually found very confusing because if you look in the file
the headers shows "SHA1" not "SHA256" and there are commands for both
"sha1sum" and "sha256sum".


This has been discussed before on the list.

The header indicates that the checksum file _itself_ was signed with an
SHA1 checksum.  The checksums _inside_ the checksum file are the SHA256
checksums of the various .iso images.
--
- Rick Stevens, Systems Engineer ri...@nerd.com -
- AIM/Skype: therps2ICQ: 22643734Yahoo: origrps2 -
--
-   Blech!  ACKth!  Ooop!  -- Bill the Cat (Outland) -
--

But does that solve my issue. I'm not able to write the iso to USB. 
Please tell me how to get through this.


--
Saurabh Sharma
Linux user number: 490644
http://sawrub-blog.blogspot.com/
Open your doors...It's time to look beyond Windows

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

Re: F12 Live CHECKSUM failing

[Todd Zullinger]

Rick Stevens wrote:
> I know that and you know that, but there seems to be a lot of folk
> who haven't seen the page, forgotten about it or are simply
> confused.

Indeed.  I figured mentioning it once again might help spread the
information.  I realize it will remain a problem until F-13 when we
add some explanatory text directly to the checksum file.  :)

> "We will continue to repeat this until you either surrender, concur
> or go insane." --The Department of Redundancy Department

Ha.  If only that mail had got stuck in a resend loop.

-- 
ToddOpenPGP -> KeyID: 0xBEAF0CE3 | URL: www.pobox.com/~tmz/pgp
~~
Today I will gladly share my experience and advice, for there are no
sweater words than "I told you so!"



pgplLxM41RMC2.pgp
Description: PGP signature
-- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

Re: F12 Live CHECKSUM failing

[Rick Stevens]

On 12/17/2009 11:02 AM, Todd Zullinger wrote:

Rick Stevens wrote:

This has been discussed before on the list.

The header indicates that the checksum file _itself_ was signed with
an SHA1 checksum.  The checksums _inside_ the checksum file are the
SHA256 checksums of the various .iso images.


And this is why we added the large red warning about this to the web
page on verification: https://fedoraproject.org/verify :)


I know that and you know that, but there seems to be a lot of folk
who haven't seen the page, forgotten about it or are simply confused.

"We will continue to repeat this until you either surrender, concur or
go insane." --The Department of Redundancy Department
--
- Rick Stevens, Systems Engineer  ri...@nerd.com -
- AIM/Skype: therps2ICQ: 22643734Yahoo: origrps2 -
--
-"Hello. My PID is Inigo Montoya.  You `kill -9'-ed my parent-
- process.  Prepare to vi."  -
--

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

Re: F12 Live CHECKSUM failing

[Todd Zullinger]

Rick Stevens wrote:
> This has been discussed before on the list.
>
> The header indicates that the checksum file _itself_ was signed with
> an SHA1 checksum.  The checksums _inside_ the checksum file are the
> SHA256 checksums of the various .iso images.

And this is why we added the large red warning about this to the web
page on verification: https://fedoraproject.org/verify :)

-- 
ToddOpenPGP -> KeyID: 0xBEAF0CE3 | URL: www.pobox.com/~tmz/pgp
~~
Finagle's Second Law: No matter what the anticipated result, there
will always be someone eager to (a) misinterpret it, (b) fake it, or
(c) believe it happened according to his own pet theory.
-- Anonymous



pgpwxKvmv45pp.pgp
Description: PGP signature
-- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

Re: F12 Live CHECKSUM failing

[Suvayu Ali]

On Thursday 17 December 2009 10:21 AM, Sawrub wrote:

On 12/17/2009 11:50 PM, Richard Shaw wrote:

Well, I'm not going to say that the above is not a problem as I saw
the same thing when using the same steps, however, nothing you have
done so far has anything to do directly with the ISO. That doesn't
happen until you do:

sha256sum *-CHECKSUM

Here is the rest of the step.
[saw...@mybox Fedora-12-x86_64-Live]$ sha256sum *-CHECKSUM
3b74f72a6ad75eb8dc849503e9e76569bec37b5677847f98659120f1072c7944
Fedora-12-x86_64-Live-CHECKSUM


In addition to what Rick mentioned in another post, your command is 
missing a flag. It should be,


$ sha256sum -c *-CHECKSUM

--
Suvayu

Open source is the future. It sets us free.

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

Re: F12 Live CHECKSUM failing

[Rick Stevens]

On 12/17/2009 10:20 AM, Richard Shaw wrote:

On Thu, Dec 17, 2009 at 12:03 PM, Sawrub  wrote:

I downloaded the Fedora-12-x86_64-Live.iso using the torrent client, taking
the torrent from
http://torrent.fedoraproject.org/torrents//Fedora-12-x86_64-Live.torrent.
But the creation of bootable USB was not possible as the iso verification
failed message came up in the USB creator.
Verifying the iso following the steps at
'https://fedoraproject.org/en/verify' also resulted in vain. Please help me
so that the b/w does not goes wasted.

[saw...@mybox Fedora-12-x86_64-Live]$ ll
total 671756
-rw-rw-r--  1 sawrub sawrub   966 2009-12-17 22:34
Fedora-12-x86_64-Live-CHECKSUM
-rwxr-xr-x. 1 sawrub sawrub 687865856 2009-12-03 00:18
Fedora-12-x86_64-Live.iso
-rwxr-xr-x. 1 sawrub sawrub   152 2009-12-02 23:50 README-SOURCES

[saw...@mybox Fedora-12-x86_64-Live]$ curl
https://fedoraproject.org/static/fedora.gpg | gpg --import
  % Total% Received % Xferd  Average Speed   TimeTime Time
  Current
 Dload  Upload   Total   SpentLeft  Speed
100  9323  100  93230 0   4396  0  0:00:02  0:00:02 --:--:--
  8696
gpg: key 4EBFC273: "Fedora (10)" not changed
gpg: key 0B86274E: "Fedora (10 testing)" not
changed
gpg: key D22E77F2: "Fedora (11)" not changed
gpg: key 57BBCCBA: "Fedora (12)" not changed
gpg: key 217521F6: "Fedora EPEL" not changed
gpg: Total number processed: 5
gpg:  unchanged: 5

[saw...@mybox Fedora-12-x86_64-Live]$ gpg --verify *-CHECKSUM
gpg: Signature made Tue 10 Nov 2009 01:26:40 AM IST using RSA key ID
57BBCCBA
gpg: Good signature from "Fedora (12)"
gpg: WARNING: This key is not certified with a trusted signature!
gpg:  There is no indication that the signature belongs to the
owner.
Primary key fingerprint: 6BF1 78D2 8A78 9C74 AC0D  C63B 9D1C C348 57BB CCBA
[saw...@mybox Fedora-12-x86_64-Live]$


Well, I'm not going to say that the above is not a problem as I saw
the same thing when using the same steps, however, nothing you have
done so far has anything to do directly with the ISO. That doesn't
happen until you do:

sha256sum *-CHECKSUM

When I actually found very confusing because if you look in the file
the headers shows "SHA1" not "SHA256" and there are commands for both
"sha1sum" and "sha256sum".


This has been discussed before on the list.

The header indicates that the checksum file _itself_ was signed with an
SHA1 checksum.  The checksums _inside_ the checksum file are the SHA256
checksums of the various .iso images.
--
- Rick Stevens, Systems Engineer  ri...@nerd.com -
- AIM/Skype: therps2ICQ: 22643734Yahoo: origrps2 -
--
-   Blech!  ACKth!  Ooop!  -- Bill the Cat (Outland) -
--

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

Re: F12 Live CHECKSUM failing

[Sawrub]

On 12/17/2009 11:50 PM, Richard Shaw wrote:

On Thu, Dec 17, 2009 at 12:03 PM, Sawrub  wrote:
   

I downloaded the Fedora-12-x86_64-Live.iso using the torrent client, taking
the torrent from
http://torrent.fedoraproject.org/torrents//Fedora-12-x86_64-Live.torrent.
But the creation of bootable USB was not possible as the iso verification
failed message came up in the USB creator.
Verifying the iso following the steps at
'https://fedoraproject.org/en/verify' also resulted in vain. Please help me
so that the b/w does not goes wasted.

[saw...@mybox Fedora-12-x86_64-Live]$ ll
total 671756
-rw-rw-r--  1 sawrub sawrub   966 2009-12-17 22:34
Fedora-12-x86_64-Live-CHECKSUM
-rwxr-xr-x. 1 sawrub sawrub 687865856 2009-12-03 00:18
Fedora-12-x86_64-Live.iso
-rwxr-xr-x. 1 sawrub sawrub   152 2009-12-02 23:50 README-SOURCES

[saw...@mybox Fedora-12-x86_64-Live]$ curl
https://fedoraproject.org/static/fedora.gpg | gpg --import
  % Total% Received % Xferd  Average Speed   TimeTime Time
  Current
 Dload  Upload   Total   SpentLeft  Speed
100  9323  100  93230 0   4396  0  0:00:02  0:00:02 --:--:--
  8696
gpg: key 4EBFC273: "Fedora (10)" not changed
gpg: key 0B86274E: "Fedora (10 testing)" not
changed
gpg: key D22E77F2: "Fedora (11)" not changed
gpg: key 57BBCCBA: "Fedora (12)" not changed
gpg: key 217521F6: "Fedora EPEL" not changed
gpg: Total number processed: 5
gpg:  unchanged: 5

[saw...@mybox Fedora-12-x86_64-Live]$ gpg --verify *-CHECKSUM
gpg: Signature made Tue 10 Nov 2009 01:26:40 AM IST using RSA key ID
57BBCCBA
gpg: Good signature from "Fedora (12)"
gpg: WARNING: This key is not certified with a trusted signature!
gpg:  There is no indication that the signature belongs to the
owner.
Primary key fingerprint: 6BF1 78D2 8A78 9C74 AC0D  C63B 9D1C C348 57BB CCBA
[saw...@mybox Fedora-12-x86_64-Live]$
 

Well, I'm not going to say that the above is not a problem as I saw
the same thing when using the same steps, however, nothing you have
done so far has anything to do directly with the ISO. That doesn't
happen until you do:

sha256sum *-CHECKSUM
   

Here is the rest of the step.
[saw...@mybox Fedora-12-x86_64-Live]$ sha256sum *-CHECKSUM
3b74f72a6ad75eb8dc849503e9e76569bec37b5677847f98659120f1072c7944  
Fedora-12-x86_64-Live-CHECKSUM

[saw...@mybox Fedora-12-x86_64-Live]$

When I actually found very confusing because if you look in the file
the headers shows "SHA1" not "SHA256" and there are commands for both
"sha1sum" and "sha256sum".

   

Yes the header is SHA1

Everything you've shown in your email has to do with verifying the
source of the CHECKSUM data, not comparing the CHECKSUM data to the
ISO.

   

Signature itself failing the test, kicked me down.

Richard

   


--
Saurabh Sharma
Linux user number: 490644
http://sawrub-blog.blogspot.com/
Open your doors...It's time to look beyond Windows

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

Re: F12 Live CHECKSUM failing

[Richard Shaw]

On Thu, Dec 17, 2009 at 12:03 PM, Sawrub  wrote:
> I downloaded the Fedora-12-x86_64-Live.iso using the torrent client, taking
> the torrent from
> http://torrent.fedoraproject.org/torrents//Fedora-12-x86_64-Live.torrent.
> But the creation of bootable USB was not possible as the iso verification
> failed message came up in the USB creator.
> Verifying the iso following the steps at
> 'https://fedoraproject.org/en/verify' also resulted in vain. Please help me
> so that the b/w does not goes wasted.
>
> [saw...@mybox Fedora-12-x86_64-Live]$ ll
> total 671756
> -rw-rw-r--  1 sawrub sawrub       966 2009-12-17 22:34
> Fedora-12-x86_64-Live-CHECKSUM
> -rwxr-xr-x. 1 sawrub sawrub 687865856 2009-12-03 00:18
> Fedora-12-x86_64-Live.iso
> -rwxr-xr-x. 1 sawrub sawrub       152 2009-12-02 23:50 README-SOURCES
>
> [saw...@mybox Fedora-12-x86_64-Live]$ curl
> https://fedoraproject.org/static/fedora.gpg | gpg --import
>  % Total    % Received % Xferd  Average Speed   Time    Time     Time
>  Current
>                                 Dload  Upload   Total   Spent    Left  Speed
> 100  9323  100  9323    0     0   4396      0  0:00:02  0:00:02 --:--:--
>  8696
> gpg: key 4EBFC273: "Fedora (10) " not changed
> gpg: key 0B86274E: "Fedora (10 testing) " not
> changed
> gpg: key D22E77F2: "Fedora (11) " not changed
> gpg: key 57BBCCBA: "Fedora (12) " not changed
> gpg: key 217521F6: "Fedora EPEL " not changed
> gpg: Total number processed: 5
> gpg:              unchanged: 5
>
> [saw...@mybox Fedora-12-x86_64-Live]$ gpg --verify *-CHECKSUM
> gpg: Signature made Tue 10 Nov 2009 01:26:40 AM IST using RSA key ID
> 57BBCCBA
> gpg: Good signature from "Fedora (12) "
> gpg: WARNING: This key is not certified with a trusted signature!
> gpg:          There is no indication that the signature belongs to the
> owner.
> Primary key fingerprint: 6BF1 78D2 8A78 9C74 AC0D  C63B 9D1C C348 57BB CCBA
> [saw...@mybox Fedora-12-x86_64-Live]$

Well, I'm not going to say that the above is not a problem as I saw
the same thing when using the same steps, however, nothing you have
done so far has anything to do directly with the ISO. That doesn't
happen until you do:

sha256sum *-CHECKSUM

When I actually found very confusing because if you look in the file
the headers shows "SHA1" not "SHA256" and there are commands for both
"sha1sum" and "sha256sum".

Everything you've shown in your email has to do with verifying the
source of the CHECKSUM data, not comparing the CHECKSUM data to the
ISO.

Richard

-- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines