Re: [pca] how to verify md5(from CHECKSUMS file) of patches downloaded

2010-12-16 Thread Martin Paul
Michele Vecchiato wrote: Ok, I'm a paranoid person ;-), but how does pca to verify that the patch downloaded from Oracle site is not corrupt? Simple answer - it doesn't. I have made experiments with JAR patches in the past (which are cryptographically signed), but the procedures to verify the

Re: [pca] how to verify md5(from CHECKSUMS file) of patches downloaded

2010-12-16 Thread Martin Paul
Martin Paul wrote: The reaons (or at least one reason) for differing checksums is that Sun/Oracle sometimes changes a patch zip file's contents after first publishing, like updating README files. As far as I know any functional change would trigger a new revision. A small addendum: I used a

[pca] how to verify md5(from CHECKSUMS file) of patches downloaded

2010-12-15 Thread Michele Vecchiato
Ok, I'm a paranoid person ;-), but how does pca to verify that the patch downloaded from Oracle site is not corrupt? I search on PCA ML archive but no answer... You have never done this kind of testing? To answer this question made a shell script that downloads the file CHECKSUMS