Re: Checksums missing for firmware-8.2.0-amd64-i386-netinst.iso

2015-10-07 Thread Steve McIntyre
On Wed, Sep 30, 2015 at 04:22:58PM +0200, Simon Josefsson wrote:
>> On Fri, Sep 25, 2015 at 09:38:39AM +0200, Simon Josefsson wrote:
>> >Den Thu, 24 Sep 2015 23:34:53 +0100
>> >skrev Re: Checksums missing for
>> >firmware-8.2.0-amd64-i386-netinst.iso:
>> >
>> >> On Thu, Sep 24, 2015 at 10:17:50PM +0200, Simon Josefsson wrote:
>> >> >Hi.  In the SHA256SUMS etc files on
>> >> >
>> >> >http://cdimage.debian.org/cdimage/unofficial/non-free/cd-including-firmware/8.2.0/multi-arch/iso-cd/
>> >> >
>> >> >I cannot find checksums for the
>> >> >firmware-8.2.0-amd64-i386-netinst.iso file.  How could I verify
>> >> >the integrity of that download?
>> >> 
>> >> Hi Simon,
>> >> 
>> >> Thanks for your report! There was a scripting bug that dropped that
>> >> checksum when we released. I've just fixed things up now and
>> >> re-signed the checksums files.
>> >
>> >Thank you!
>> >
>> >I also couldn't find checksums/signatures on the firmware files, are
>> >they published anywhere?  I looked here:
>> >
>> >http://cdimage.debian.org/cdimage/unofficial/non-free/firmware/jessie/current/
>> 
>> That's a good question; we don't currently sign those at all, and
>> that's less than ideal I guess. Please file a bug to remind me and
>> I'll get that fixed up shortly...
>
>Against what package?

It's done, no need now... :-)

-- 
Steve McIntyre, Cambridge, UK.st...@einval.com
"We're the technical experts.  We were hired so that management could
 ignore our recommendations and tell us how to do our jobs."  -- Mike Andrews



Re: Checksums missing for firmware-8.2.0-amd64-i386-netinst.iso

2015-09-30 Thread Simon Josefsson
> On Fri, Sep 25, 2015 at 09:38:39AM +0200, Simon Josefsson wrote:
> >Den Thu, 24 Sep 2015 23:34:53 +0100
> >skrev Re: Checksums missing for
> >firmware-8.2.0-amd64-i386-netinst.iso:
> >
> >> On Thu, Sep 24, 2015 at 10:17:50PM +0200, Simon Josefsson wrote:
> >> >Hi.  In the SHA256SUMS etc files on
> >> >
> >> >http://cdimage.debian.org/cdimage/unofficial/non-free/cd-including-firmware/8.2.0/multi-arch/iso-cd/
> >> >
> >> >I cannot find checksums for the
> >> >firmware-8.2.0-amd64-i386-netinst.iso file.  How could I verify
> >> >the integrity of that download?
> >> 
> >> Hi Simon,
> >> 
> >> Thanks for your report! There was a scripting bug that dropped that
> >> checksum when we released. I've just fixed things up now and
> >> re-signed the checksums files.
> >
> >Thank you!
> >
> >I also couldn't find checksums/signatures on the firmware files, are
> >they published anywhere?  I looked here:
> >
> >http://cdimage.debian.org/cdimage/unofficial/non-free/firmware/jessie/current/
> 
> That's a good question; we don't currently sign those at all, and
> that's less than ideal I guess. Please file a bug to remind me and
> I'll get that fixed up shortly...

Against what package?

/Simon


pgp8ibQlwuNGL.pgp
Description: OpenPGP digital signatur


Re: Checksums missing for firmware-8.2.0-amd64-i386-netinst.iso

2015-09-28 Thread Steve McIntyre
On Fri, Sep 25, 2015 at 09:38:39AM +0200, Simon Josefsson wrote:
>Den Thu, 24 Sep 2015 23:34:53 +0100
>skrev Re: Checksums missing for firmware-8.2.0-amd64-i386-netinst.iso:
>
>> On Thu, Sep 24, 2015 at 10:17:50PM +0200, Simon Josefsson wrote:
>> >Hi.  In the SHA256SUMS etc files on
>> >
>> >http://cdimage.debian.org/cdimage/unofficial/non-free/cd-including-firmware/8.2.0/multi-arch/iso-cd/
>> >
>> >I cannot find checksums for the firmware-8.2.0-amd64-i386-netinst.iso
>> >file.  How could I verify the integrity of that download?
>> 
>> Hi Simon,
>> 
>> Thanks for your report! There was a scripting bug that dropped that
>> checksum when we released. I've just fixed things up now and re-signed
>> the checksums files.
>
>Thank you!
>
>I also couldn't find checksums/signatures on the firmware files, are
>they published anywhere?  I looked here:
>
>http://cdimage.debian.org/cdimage/unofficial/non-free/firmware/jessie/current/

That's a good question; we don't currently sign those at all, and
that's less than ideal I guess. Please file a bug to remind me and
I'll get that fixed up shortly...

-- 
Steve McIntyre, Cambridge, UK.st...@einval.com
"Since phone messaging became popular, the young generation has lost the
 ability to read or write anything that is longer than one hundred and sixty
 characters."  -- Ignatios Souvatzis



Checksums missing for firmware-8.2.0-amd64-i386-netinst.iso

2015-09-24 Thread Simon Josefsson
Hi.  In the SHA256SUMS etc files on

http://cdimage.debian.org/cdimage/unofficial/non-free/cd-including-firmware/8.2.0/multi-arch/iso-cd/

I cannot find checksums for the firmware-8.2.0-amd64-i386-netinst.iso
file.  How could I verify the integrity of that download?

/Simon



signature.asc
Description: This is a digitally signed message part


Re: Checksums missing for firmware-8.2.0-amd64-i386-netinst.iso

2015-09-24 Thread Steve McIntyre
On Thu, Sep 24, 2015 at 10:17:50PM +0200, Simon Josefsson wrote:
>Hi.  In the SHA256SUMS etc files on
>
>http://cdimage.debian.org/cdimage/unofficial/non-free/cd-including-firmware/8.2.0/multi-arch/iso-cd/
>
>I cannot find checksums for the firmware-8.2.0-amd64-i386-netinst.iso
>file.  How could I verify the integrity of that download?

Hi Simon,

Thanks for your report! There was a scripting bug that dropped that
checksum when we released. I've just fixed things up now and re-signed
the checksums files.

-- 
Steve McIntyre, Cambridge, UK.st...@einval.com
Is there anybody out there?