Mailing List Archive

On Wed, Sep 08, 1999 at 01:25:31PM +0200, Martin P. Peikert wrote:
> Hello,
>
> does someone know how I can get the md5checksum of gnupg-1.0.0.tar.gz?

I have a tool named "md5sum" for this on my Debian GNU/Linux system.

--
Holger Paschke
mailto:holger.paschke@uni-bielefeld.de
http://www.mathematik.uni-bielefeld.de/~paschke (Public Keys & more)

> > does someone know how I can get the md5checksum of gnupg-1.0.0.tar.gz?
>
> I have a tool named "md5sum" for this on my Debian GNU/Linux system.

And Red Hat Linuxes have the "md5sum" in /usr/bin when you install the
textutils RPM. It´s in my textutils-1.22-8.

--
Holger Schurig | Die Botschaft vom Kreuz ist dem
Renzstr. 31 | Unglaeubigen eine Torheit, ...
D-74821 Mosbach | Anfang von 1. Korinther 1:18

Hello,

i made a mistake. The question "how can I get the md5checksum" appeared
to you as "oh, he doesn't have (or know how to work with) 'md5sum'".
Sorry. That's not the problem.

The question is: how can I verify the checksum.

Regards

p.s.: ...and SuSE-linux has md5sum, too.
-------------------------------------------------
Dipl. Math. Martin Peikert EN 636
TU Berlin fon 314-23881
Sekretariat EN 2 fax 314-22284
-------------------------------------------------

On Wed, 8 Sep 1999, Holger Schurig wrote:

> > > does someone know how I can get the md5checksum of gnupg-1.0.0.tar.gz?
> >
> > I have a tool named "md5sum" for this on my Debian GNU/Linux system.
>
> And Red Hat Linuxes have the "md5sum" in /usr/bin when you install the
> textutils RPM. It´s in my textutils-1.22-8.
>
> --
> Holger Schurig | Die Botschaft vom Kreuz ist dem
> Renzstr. 31 | Unglaeubigen eine Torheit, ...
> D-74821 Mosbach | Anfang von 1. Korinther 1:18
>

On Thu, 9 Sep 1999, Martin P. Peikert wrote:

> The question is: how can I verify the checksum.

Their are two ways to perform this task:

a.) calculate the MD5 of your GnuPG copy with the tool `md5sum` and
compare your result with the published MD5:

# md5sum gnupg-1.0.0.tar.gz

This will print out a line with the MD5 of your copy. For example this
should be the correct result:

bba45febd501acf8e19db402506dae94 gnupg-1.0.0.tar.gz


b.) Use `md5sum` to verify your GnuPG copy:

1.) Go to the directoy with the gnupg-1.0.0.tar.gz file

2.) Type the following command with the MD5 of GnuPG you saw on this
mailing list or other sources:

# echo "MD5_FOUND_IN_THE_NET gnupg-1.0.0.tar.gz" | md5sum -c"

3.) If the MD5 checksum is correct, you will see this result:

gnupg-1.0.0.tar.gz: OK



cu
Michael

> The question is: how can I verify the checksum.

By verifying what your "md5sum" says with what has has been published,
e.g. on the website or or Freshmeat.net. The text there says:

Released the first production version. <P><B>Md5sum:</B><BR>
bba45febd501acf8e19db402506dae94 gnupg-1.0.0.tar.gz

So the out output of "md5sum gnupg-1.0.0.tar.gz" should give you an
indication if the tar.gz that you downloaded is identical to the
tar.gz the poster of the above lines md5summed.

--
Holger Schurig | Die Botschaft vom Kreuz ist dem
Renzstr. 31 | Unglaeubigen eine Torheit, ...
D-74821 Mosbach | Anfang von 1. Korinther 1:18