Author: marcus
Date: Mon Jul 29 19:45:19 2013
New Revision: 1508193
URL: http://svn.apache.org/r1508193
Log:
Created a webpage to describe how to verify downloads with checksums
Added:
openoffice/ooo-site/trunk/content/download/checksums.html (with props)
Added: openoffice/ooo-site/trunk/content/download/checksums.html
URL:
http://svn.apache.org/viewvc/openoffice/ooo-site/trunk/content/download/checksums.html?rev=1508193&view=auto
==============================================================================
--- openoffice/ooo-site/trunk/content/download/checksums.html (added)
+++ openoffice/ooo-site/trunk/content/download/checksums.html Mon Jul 29
19:45:19 2013
@@ -0,0 +1,284 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd";>
+<html xmlns="http://www.w3.org/1999/xhtml"; />
+<head>
+ <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
+ <title>Apache OpenOffice - How to verify downloads with checksum
files?</title>
+ <script type="text/javascript" src="../scripts/entourage.js"></script>
+ <style type="text/css">
+ /* <![CDATA[ */
+ /*-------------------- Exceptions on standard css -----------------------*/
+ @import "styles.css";
+ @import "exceptions.css";
+ /* ]]> */
+ </style>
+</head>
+
+<body>
+
+<script type="text/javascript">
+ <!--
+ entourage.initialize();
+ // -->
+</script>
+
+<h1>Apache OpenOffice - How to verify downloads with checksum files?</h1>
+<br />
+
+<ul>
+ <li><h3><a href="other.html" title="Get the checksums for all Apache
OpenOffice builds and files">
+ Get the checksums for all Apache OpenOffice builds and files</a></h3></li>
+ <br />
+ <li><h3><a href="#asc_win" title="Verify with ASC and KEYS hashes on
Windows">ASC and KEYS - Windows</a></h3></li>
+ <li><h3><a href="#asc_linux" title="Verify with ASC and KEYS hashes on
Linux">ASC and KEYS - Linux</a></h3></li>
+ <li><h3><a href="#asc_macos" title="Verify with ASC and KEYS hashes on
Mac OS">ASC and KEYS - Mac OS</a></h3></li>
+ <li><h3><a href="#md5_win" title="Verify with MD5 checksums on
Windows">MD5 - Windows</a></h3></li>
+ <li><h3><a href="#md5_linux" title="Verify with MD5 checksums on
Linux">MD5 - Linux</a></h3></li>
+ <li><h3><a href="#md5_macos" title="Verify with MD5 checksums on Mac
OS">MD5 - Mac OS</a></h3></li>
+ <li><h3><a href="#sha256_win" title="Verify with SHA256 checksums on
Windows">SHA256 - Windows</a></h3></li>
+ <li><h3><a href="#sha256_linux" title="Verify with SHA256 checksums on
Linux">SHA256 - Linux</a></h3></li>
+ <li><h3><a href="#sha256_macos" title="Verify with SHA256 checksums on Mac
OS">SHA256 - Mac OS</a></h3></li>
+ <br />
+ <li><h3><a href="#no_match" title="What to do when the checksums do not
match?">
+ What to do when the checksums do not match?</a></h3></li>
+ <br />
+ <li><h3><a href="#notes" title="Please read the important notes
before downloading and using Apache OpenOffice">
+ Important Notes</a></h3></li>
+</ul>
+<br />
+
+<hr style="display: block;"/>
+
+<h3>How to verify your download with ASC, MD5, SHA256 checksums?</h3>
+
+<p>A checksum and hash prcossed on the files that were downloaded is a way to
make sure that the content is authentic and
+was not manipulated by an unauthorized third party, and has not been damaged
during the download process.</p>
+<br />
+
+<h4>Verify with ASC and KEYS hashes</h4>
+
+<p id="asc_win"><b>This is how you verify with ASC and KEYS hashes on
Windows</b></p>
+<br />
+
+<ul>
+ <li><a href="http://gpg4win.org/download.html"; title="Download 'Gpg4win' (by
Intevation GmbH, Germany)">
+ Download and install "Gpg4win" (by Intevation GmbH, Germany)</a>. "Gpg4win"
(full name is "GNU Privacy Guard for Windows")
+ is used to encrypt data.</li>
+ <li>For verifying the hashes you need the program "GnuPg". This is a tool
that runs not in the graphical mode but in the
+ command prompt of Windows. Therefore you have to enter always the full path
(default location after installation:
+ <code>C:\Program Files\Gnu\GnuPg\gpg.exe</code>) until you add it to the
<code>$PATH</code> system environment
+ variable.</li>
+ <li>Save the following file with your Internet browser to the location where
the downloaded AOO file is stored:</li>
+ <li><pre>https://people.apache.org/keys/group/openoffice.asc</pre></li>
+ <li>Open the start menu and enter <code>cmd.exe</code> into the search
box.</li>
+ <li>Now change to the directory with the downloaded AOO and ASC file, import
and verify with the following commands:</li>
+ <li><pre>cd <path_to_AOO_and_ASC_file></pre></li>
+ <li><pre>C:\Program Files\Gnu\GnuPg\gpg.exe --import
openoffice.asc</pre></li>
+ <li><pre>C:\Program Files\Gnu\GnuPg\gpg.exe --verify <ASC file>.asc
<AOO file>.exe</pre></li>
+ <li>When both checksums match it is indicated with an "Good signature from
<Person who has created the signature>
+ statement. <br /> Otherwise "BAD signature from ...".</li>
+</ul>
+<br />
+
+<p id="asc_linux"><b>This is how you verify with ASC and KEYS hashes on
Linux</b></p>
+<br />
+
+<ul>
+ <li>Open a terminal and change to the directory with the downloaded AOO and
ASC file.</li>
+ <li>Type in the following commands:</li>
+ <li><pre>cd <path_to_AOO_and_ASC_file></pre></li>
+ <li><pre>wget https://people.apache.org/keys/group/openoffice.asc</pre></li>
+ <li><pre>gpg --import openoffice.asc</pre></li>
+ <li><pre>gpg --verify <ASC file>.asc <AOO file>.tar.gz</pre></li>
+ <li>When both checksums match it is indicated with an "Good signature from
<Person who has created the signature>
+ statement. <br /> Otherwise "BAD signature from ...".</li>
+</ul>
+<br />
+
+<p id="asc_macos"><b>This is how you verify with ASC and KEYS hashes on Mac
OS</b></p>
+<br />
+
+<ul>
+ <li>A requirement is that you have installed <a
href="http://www.gpgtools.org";>GnuPG</a>.</li>
+ <li>Open a terminal (usually from here: "/Applications/Utilities").</li>
+ <li>Type in the following commands:</li>
+ <li><pre>cd <path_to_AOO_and_ASC_file></pre></li>
+ <li><pre>curl https://people.apache.org/keys/group/openoffice.asc -o
openoffice.asc</pre></li>
+ <li><pre>gpg --import openoffice.asc</pre></li>
+ <li><pre>gpg --verify <ASC file>.asc <AOO file>.dmg</pre></li>
+ <li>When both checksums match it is indicated with an "Good signature from
<Person who has created the signature>
+ statement. <br /> Otherwise "BAD signature from ...".</li>
+</ul>
+<br />
+
+<h4>Verify with MD5 hashes</h4>
+
+<p id="md5_win"><b>This is how you verify MD5 checksums on Windows</b></p>
+<br />
+
+<ul>
+ <li><a href="http://www.krylack.com/file-checksum-tool/"; title="Download
'File Checksum Tool' (by KRyLack Software)">
+ Download "File Checksum Tool" (by KRyLack Software)</a>. "File Checksum
Tool" is a graphical tool that is easy to use.
+ <a href="http://www.krylack.com/images/file-checksum-tool-screenshot.jpg";
title="Screenshot of 'File Checksum Tool'">
+ See here for a screenshot</a>.</li>
+ <li>Start the tool from where you have saved the downloaded file.</li>
+ <li>Section "1) File to Verify": Insert the path and filename of the
downloaded AOO file. The [Browse] button will
+ help to locate it with the Windows Explorer.</li>
+ <li>Section "2) Hashing Algorithm": Choose "MD5".</li>
+ <li>Section "3) File Checksum": Click on [Calculate Hash].</li>
+ <li>Section "4) Verify With": Paste the hash from the MD5 file you have
downloaded. First you have to open it and
+ copy the hash value.</li>
+ <li>Finally, click on [Compare].</li>
+ <li>When both hash values match a dialogbox shows "Checksums match".
Otherwise "Checksums do not match".</li>
+ <li>If the checksums do not match, please see the <a href="#checksums-notify"
+ title="What to do when the checksums do not match?">section below</a>.</li>
+</ul>
+<br />
+
+<p id="md5_linux"><b>This is how you verify MD5 checksums on Linux</b></p>
+<br />
+
+<ul>
+ <li>Open a terminal and change to the directory with the downloaded AOO and
MD5 file.</li>
+ <li>Type in the following commands:</li>
+ <li><pre>cd <path_to_AOO_and_MD5_file></pre></li>
+ <li><pre>md5sum -c <AOO file>.tar.gz.md5</pre></li>
+ <li>When both checksums match it is indicated with an "<AOO
file>.tar.gz: OK" statement.
+ <br />Otherwise "md5sum: WARNING: 1 of 1 computed checksum did NOT
match".</li>
+ <li>If the checksums do not match, please see the <a href="#checksums-notify"
+ title="What to do when the checksums do not match?">section below</a>.</li>
+</ul>
+<br />
+
+<p id="md5_macos"><b>This is how you verify MD5 checksums on Mac OS</b></p>
+<br />
+
+<ul>
+ <li>Open a terminal (usually from here: "/Applications/Utilities").</li>
+ <li>Type in the following commands:</li>
+ <li><pre>cd <path_to_AOO_and_MD5_file></pre></li>
+ <li><pre>openssl dgst -md5 <AOO file>.dmg</pre></li>
+ <li><pre>cat <MD5 file>.md5</pre></li>
+ <li>Now compare both MD5 checksums.</li>
+ <li>If the checksums do not match, please see the <a href="#checksums-notify"
+ title="What to do when the checksums do not match?">section below</a>.</li>
+</ul>
+<br />
+
+<p>For more information please refer to the more detailed description about <a
href="../dev_docs/using_md5sums.html"
+title="How to use MD5 hashes">how to use MD5 hashes</a> on Windows, Linux and
via Firefox (for all platforms)..</p>
+<br />
+
+<h4>Verify with SHA256 hashes</h4>
+
+<p id="sha256_win"><b>This is how you verify SHA256 checksums on
Windows</b></p>
+<br />
+
+<ul>
+ <li><a href="http://www.krylack.com/file-checksum-tool/"; title="Download
'File Checksum Tool' (by KRyLack Software)">
+ Download "File Checksum Tool" (by KRyLack Software)</a>. "File Checksum
Tool" is a graphical tool that is easy to use.
+ <a href="http://www.krylack.com/images/file-checksum-tool-screenshot.jpg";
title="Screenshot of 'File Checksum Tool'">
+ See here for a screenshot</a>.</li>
+ <li>Start the tool from where you have saved the downloaded file.</li>
+ <li>Section "1) File to Verify": Insert the path and filename of the
downloaded AOO file. The [Browse] button will
+ help to locate it with the Windows Explorer.</li>
+ <li>Section "2) Hashing Algorithm": Choose "SHA-256".</li>
+ <li>Section "3) File Checksum": Click on [Calculate Hash].</li>
+ <li>Section "4) Verify With": Paste the hash from the SHA256 file you have
downloaded. First you have to open it and
+ copy the hash value.</li>
+ <li>Finally, click on [Compare].</li>
+ <li>When both hash values match a dialogbox shows "Checksums match".
Otherwise "Checksums do not match".</li>
+ <li>If the checksums do not match, please see the <a href="#checksums-notify"
+ title="What to do when the checksums do not match?">section below</a>.</li>
+</ul>
+<br />
+
+<p id="sha256_linux"><b>This is how you verify SHA256 checksums on
Linux</b></p>
+<br />
+
+<ul>
+ <li>Open a terminal, change to the directory with the downloaded AOO file
and SHA256 file.</li>
+ <li>Type in the following commands:</li>
+ <li><pre>cd <path_to_AOO_and_SHA256_file></pre></li>
+ <li><pre>sha256sum -c <AOO file>.tar.gz.sha256</pre></li>
+ <li>When both checksums match it is indicated with an "<AOO
file>.tar.gz: OK" statement.
+ <br />Otherwise "sha256sum: WARNING: 1 of 1 computed checksum did NOT
match".</li>
+ <li>If the checksums do not match, please see the <a href="#checksums-notify"
+ title="What to do when the checksums do not match?">section below</a>.</li>
+</ul>
+<br />
+
+<p id="sha256_macos"><b>This is how you verify SHA256 checksums on Mac
OS</b></p>
+<br />
+
+<ul>
+ <li>Open a terminal (usually from here: "/Applications/Utilities").</li>
+ <li>Type in the following commands:</li>
+ <li><pre>cd <path_to_AOO_and_SHA256_file></pre></li>
+ <li><pre>openssl dgst -sha256 <AOO file>.dmg</pre></li>
+ <li><pre>cat <SHA256 file>.sha256</pre></li>
+ <li>Now compare both SHA256 checksums.</li>
+ <li>If the checksums do not match, please see the <a href="#checksums-notify"
+ title="What to do when the checksums do not match?">section below</a>.</li>
+</ul>
+<br />
+
+<h3 id="no_match">What to do when the checksums do not match?</h3>
+
+<ul>
+ <li>If the checksums do not match, your downloaded AOO file is broken.
Please try again a download to get a valid
+ file.</li>
+ <li>If you are using a proxy server to get connected to the Internet try to
disable this if your Internet Service
+ Provider is allowing this. Or enable it if it is disabled at the moment.
Please consult the respective help topics for
+ the used Internet browser where to find this setting.</li>
+ <li>If you still get no matching checksum and you are sure it is not caused
by an error during downloading, please
+ inform the project. Make sure you have the following information at hand:
exact file name of the downloaded file and
+ checksum file, the processed checksum from your computer, have you used
proxy server (yes/no)?, if known from where the
+ files were downloaded.</li>
+ <li>With this information send a mail to us via the following ways:</li>
+ <li><a href="mailto:users%40openoffice.apache.org";
+ title="User's mailing list (to receive answers you need to be
subscribed)">User's mailing list</a> <b>*)</b></li>
+ <li><a href="http://user.services.openoffice.org"; title="User forums
(different languages)">
+ User forums (different languages)</a></li>
+</ul>
+
+<p><b>*)</b> Be aware that all mails do not go to a single person but a
so-called mailing list. Mails will be archived and
+can be accessed also by other users. To receive answers, you will need to
subscribe to the mailing list before sending
+mails. For instructions, see: <a
href="http://openoffice.apache.org/mailing-lists.html";
+title="Learn more about how to use mailing lists">Learn more about how to use
mailing lists</a>.</p>
+
+<p class="footer"><small><a href="#" title="Go to the start of the page">Start
of page</a></small></p>
+<br />
+
+<hr style="display: block;" />
+
+<h3 id="notes">Important Notes</h3>
+
+<h3>Report broken links</h3>
+
+<p>Please report any broken link or things you think that needs to be
corrected on this webpage by sending a mail to:
+<a
href="mailto:[email protected]?subject=Possible%20broken%20link:%203.4.1_checksums";
+title="Development mailing list (to receive answers you need to be
subscribed)">
+Development mailing list</a>. <b>*)</b></p>
+
+<h3>Where to get help when I have a problem?</h3>
+
+<p>If you encounter problems with installation or using Apache OpenOffice,
please contact us via the following ways:</p>
+<ul>
+ <li><a href="mailto:[email protected]";
+ title="User's mailing list (to receive answers you need to be
subscribed)">User's mailing list</a> <b>*)</b></li>
+ <li><a href="http://forum.openoffice.org"; title="User forums (different
languages)">
+ User forums (different languages)</a></li>
+ <li><a href="http://www.oooforum.org"; title="Another user forums">Another
user forums</a></li>
+</ul>
+<br />
+
+<p><b>*)</b> Be aware that all mails do not go to a single person but a
so-called mailing list. Mails will be archived and
+can be accessed also by other users. To receive answers, you will need to
subscribe to the mailing list before sending
+mails. For instructions, see: <a
href="http://openoffice.apache.org/mailing-lists.html";
+title="Learn more about how to use mailing lists">Learn more about how to use
mailing lists</a>.</p>
+
+<p class="footer"><small><a href="#" title="Go to the start of the page">Start
of page</a></small></p>
+
+</body>
+</html>
+
Propchange: openoffice/ooo-site/trunk/content/download/checksums.html
------------------------------------------------------------------------------
svn:eol-style = native
![http://www.krylack.com/images/file-checksum-tool-screenshot.jpg"](http://www.krylack.com/images/file-checksum-tool-screenshot.jpg"){kind=link}