The checksum file uses SHA512 not MD5SUM, so the instructions should
be updated accordingly.

SInce there's only one tarfile these days (not separate ones for
gcc-base, gcc-g++, gcc-fortran, etc) it doesn't seem necessary to
filter out the "OK" lines with grep, but I could add --quiet to the
command if we want that. I added --ignore-missing because I doubt most
people also download the README and index.html files, so the option
avoids gettings warnings about those files.

OK for CVS?

Index: htdocs/snapshots.html
===================================================================
RCS file: /cvs/gcc/wwwdocs/htdocs/snapshots.html,v
retrieving revision 1.24
diff -u -r1.24 snapshots.html
--- htdocs/snapshots.html	30 Sep 2018 14:38:47 -0000	1.24
+++ htdocs/snapshots.html	14 Mar 2019 11:42:57 -0000
@@ -35,15 +35,15 @@
 files so that autoconf et al aren't needed. This is documented in
 comments in contrib/gcc_update.</p>
 
-<p>The program <code>md5sum</code> &mdash; which is included with the 
+<p>The program <code>sha512sum</code> &mdash; which is included with the 
 <a href="https://www.gnu.org/software/coreutils/";>GNU Coreutils</a>
 &mdash; can be used to verify the integrity of a snapshot or release.
 The release script generates the file 
-<code>MD5SUMS</code> that provides a 128-bit checksum for every
-file in the tarball.&nbsp; Use the following command to verify the
-sources:<br />
+<code>sha512.sum</code> that provides a 512-bit checksum for the tarball
+and other files in the snapshot directory.&nbsp; Use the following command
+to verify the sources:<br />
  
-<code>md5sum --check MD5SUMS | grep -v OK$</code></p>
+<code>sha512sum --check --ignore-missing sha512.sum</code></p>
 
 <!--
 <p>In addition, some of our contributors also provide pre-built binaries

Reply via email to