Re: md5sums and shasums

2015-04-05 Thread Gene Heskett


On Sunday 05 April 2015 09:46:49 Brian wrote:
 On Sun 05 Apr 2015 at 07:33:18 -0600, Paul E Condon wrote:
  On 20150404_2240+0200, deloptes wrote:
   Paul E Condon wrote:
This is a place where Debian is really not newbie friendly.
  
   I think it never aimed to be - therefore you have ubuntu ... at
   least my feeling
 
  In the present, Debian relies on Ubuntu, but there are still short
  passages of text in our web site that remind me of a earlier time. A
  time before Ubuntu existed. Oh, well ...

 Ubuntu did is all a favour by choosing to be based on Debian. Its
 affect and influence have been largely beneficial. But there is always
 someone with a moan. Oh, well ...

+10 or more Brian.

Cheers, Gene Heskett
-- 
There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order.
-Ed Howdershelt (Author)
Genes Web page http://geneslinuxbox.net:6309/gene


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/201504051118.10599.ghesk...@wdtv.com



Re: md5sums and shasums

2015-04-05 Thread Paul E Condon
On 20150404_2240+0200, deloptes wrote:
 Paul E Condon wrote:
 
  This is a place where Debian is really not newbie friendly.
 
 I think it never aimed to be - therefore you have ubuntu ... at least my
 feeling
 

In the present, Debian relies on Ubuntu, but there are still short passages
of text in our web site that remind me of a earlier time. A time before
Ubuntu existed. Oh, well ...

Best regards,
-- 
Paul E Condon   
pecon...@mesanetworks.net


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150405133318.ga8...@big.lan.gnu



Re: md5sums and shasums

2015-04-05 Thread Brian
On Sun 05 Apr 2015 at 07:33:18 -0600, Paul E Condon wrote:

 On 20150404_2240+0200, deloptes wrote:
  Paul E Condon wrote:
  
   This is a place where Debian is really not newbie friendly.
  
  I think it never aimed to be - therefore you have ubuntu ... at least my
  feeling
 
 In the present, Debian relies on Ubuntu, but there are still short passages
 of text in our web site that remind me of a earlier time. A time before
 Ubuntu existed. Oh, well ...

Ubuntu did is all a favour by choosing to be based on Debian. Its affect
and influence have been largely beneficial. But there is always someone
with a moan. Oh, well ...


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/05042015144308.8e492cf94...@desktop.copernicus.demon.co.uk



Re: md5sums and shasums

2015-04-04 Thread Reco
 Hi.

On Sat, 4 Apr 2015 11:16:30 +0100
Darac Marjal mailingl...@darac.org.uk wrote:

 On Fri, 3 Apr 2015 21:51:54 -0600
 Paul E Condon pecon...@mesanetworks.net wrote:
 
  On 20150403_2316+0100, Lisi Reisz wrote:
   Can any kind soul take pity on my less than perfect sight and tell
   me where to find the md5sums and shasums for these downloads?  A
   URL would be great.  I just can't find them.
   
   https://www.debian.org/devel/debian-installer/?
   
   Thanks
   Lisi
  
  I asked that a not long ago, when RC 2 was announced. It's right in
  sight and very inconvenient to use:
  
  You click of the hot link for the cpu type the you want and up pops a
  pup-up. Look at it carefully. There is a url of a web site in Sweden,
  I think. clicking on it is not effective. You enter the url displayed
  inside to popup manually into the menubar, one key stroke at a time.
  If you get it right, you will see a list of hot links. Third one,
  'cdimage' will take you to the md5  sha sums.
  
  This is a place where Debian is really not newbie friendly. If one is
  a conscientious newbie, you have read all the fine words about using
  wget and *never* using a browser to download .iso files, but not a
  word about what to type at the command line to make wget go to where
  the goodies are. 
  
 
 I kind of wish Debian would support Metalink files for the downloads. A
 Metalink file is a text file which details all the mirror locations
 for the download (including, I think, location information, so you can
 pick closer mirrors) - which may be HTTP(S), BitTorrent, Magnet, RSync
 etc - as well as any number of hashes on the download (MD5, SHAxxx, PGP
 etc).
 
 If Metalink files were supplied, then people would have the best chance
 of quickly getting the right file.

Does this Metalink thing support checking GPG signatures of files?
The whole complexity doesn't arise from the fact that one should check
hashes of downloaded ISOs. That's easy part.

The hard part is doing it correctly, which requires to check GPG
signature of the checksum file itself first.

Reco


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/20150404140748.9e42ced1b5d64703bfc7d...@gmail.com



Re: md5sums and shasums

2015-04-04 Thread Darac Marjal
On Fri, 3 Apr 2015 21:51:54 -0600
Paul E Condon pecon...@mesanetworks.net wrote:

 On 20150403_2316+0100, Lisi Reisz wrote:
  Can any kind soul take pity on my less than perfect sight and tell
  me where to find the md5sums and shasums for these downloads?  A
  URL would be great.  I just can't find them.
  
  https://www.debian.org/devel/debian-installer/?
  
  Thanks
  Lisi
 
 I asked that a not long ago, when RC 2 was announced. It's right in
 sight and very inconvenient to use:
 
 You click of the hot link for the cpu type the you want and up pops a
 pup-up. Look at it carefully. There is a url of a web site in Sweden,
 I think. clicking on it is not effective. You enter the url displayed
 inside to popup manually into the menubar, one key stroke at a time.
 If you get it right, you will see a list of hot links. Third one,
 'cdimage' will take you to the md5  sha sums.
 
 This is a place where Debian is really not newbie friendly. If one is
 a conscientious newbie, you have read all the fine words about using
 wget and *never* using a browser to download .iso files, but not a
 word about what to type at the command line to make wget go to where
 the goodies are. 
 

I kind of wish Debian would support Metalink files for the downloads. A
Metalink file is a text file which details all the mirror locations
for the download (including, I think, location information, so you can
pick closer mirrors) - which may be HTTP(S), BitTorrent, Magnet, RSync
etc - as well as any number of hashes on the download (MD5, SHAxxx, PGP
etc).

If Metalink files were supplied, then people would have the best chance
of quickly getting the right file.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150404111630.1f7f1...@rocky.darac.org.uk



Re: md5sums and shasums

2015-04-04 Thread Darac Marjal
On Sat, 4 Apr 2015 14:07:48 +0300
Reco recovery...@gmail.com wrote:

  Hi.
 
 On Sat, 4 Apr 2015 11:16:30 +0100
 Darac Marjal mailingl...@darac.org.uk wrote:
 
  On Fri, 3 Apr 2015 21:51:54 -0600
  Paul E Condon pecon...@mesanetworks.net wrote:
  
   On 20150403_2316+0100, Lisi Reisz wrote:
Can any kind soul take pity on my less than perfect sight and
tell me where to find the md5sums and shasums for these
downloads?  A URL would be great.  I just can't find them.

https://www.debian.org/devel/debian-installer/?

Thanks
Lisi
   
   I asked that a not long ago, when RC 2 was announced. It's right
   in sight and very inconvenient to use:
   
   You click of the hot link for the cpu type the you want and up
   pops a pup-up. Look at it carefully. There is a url of a web site
   in Sweden, I think. clicking on it is not effective. You enter
   the url displayed inside to popup manually into the menubar, one
   key stroke at a time. If you get it right, you will see a list of
   hot links. Third one, 'cdimage' will take you to the md5  sha
   sums.
   
   This is a place where Debian is really not newbie friendly. If
   one is a conscientious newbie, you have read all the fine words
   about using wget and *never* using a browser to download .iso
   files, but not a word about what to type at the command line to
   make wget go to where the goodies are. 
   
  
  I kind of wish Debian would support Metalink files for the
  downloads. A Metalink file is a text file which details all the
  mirror locations for the download (including, I think, location
  information, so you can pick closer mirrors) - which may be
  HTTP(S), BitTorrent, Magnet, RSync etc - as well as any number of
  hashes on the download (MD5, SHAxxx, PGP etc).
  
  If Metalink files were supplied, then people would have the best
  chance of quickly getting the right file.
 
 Does this Metalink thing support checking GPG signatures of files?
 The whole complexity doesn't arise from the fact that one should check
 hashes of downloaded ISOs. That's easy part.
 
 The hard part is doing it correctly, which requires to check GPG
 signature of the checksum file itself first.

Yep. Section 4.2.13 of RFC 5854 describes a signature tag which
encloses an inline signature (the type of signature is not specified,
but an example is shown of an OpenPGP signature.

Section 7.1 of the same document additionally covers how the Metalink
itself can be signed.

 
 Reco
 
 


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150404173412.0d625...@rocky.darac.org.uk



Re: md5sums and shasums

2015-04-04 Thread deloptes
Paul E Condon wrote:

 This is a place where Debian is really not newbie friendly.

I think it never aimed to be - therefore you have ubuntu ... at least my
feeling



-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/mfpi7u$b9b$1...@ger.gmane.org



Re: md5sums and shasums

2015-04-03 Thread Bob Proulx
Lisi Reisz wrote:
 Can any kind soul take pity on my less than perfect sight and tell
 me where to find the md5sums and shasums for these downloads?  A URL
 would be great.  I just can't find them.
 
 https://www.debian.org/devel/debian-installer/?

That is a little difficult!  But here they are for amd64.  Replace
that with your desired architecture.

  http://cdimage.debian.org/cdimage/jessie_di_rc2/amd64/iso-cd/

Here is how I arrived there.  I know the sums are stored next to the
isos in the same directory.  I right-clicked on the link.  Then I
pasted it into the location bar of the browser.  Then I removed the
filename portion backing up to the directory.  That left the above
directory in the url and it dipsplays the SUMS files and signature
files for the entire directory.

There is no link to the sums from that page.  There is only the note
describing the process this way:

  For CD and DVD images, an MD5SUMS file is available in the same
  directory as the images.

I daresay that isn't as convenient as having a direct link.

An alternative is to know that you can find all in the directory tree
below this location.

  http://cdimage.debian.org/cdimage/

Hope that helps!
Bob


signature.asc
Description: Digital signature


md5sums and shasums

2015-04-03 Thread Lisi Reisz
Can any kind soul take pity on my less than perfect sight and tell me where to 
find the md5sums and shasums for these downloads?  A URL would be great.  I 
just can't find them.

https://www.debian.org/devel/debian-installer/?

Thanks
Lisi


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/201504032316.45548.lisi.re...@gmail.com



Re: md5sums and shasums

2015-04-03 Thread Reco
 Hi.

On Fri, 3 Apr 2015 23:16:45 +0100
Lisi Reisz lisi.re...@gmail.com wrote:

 Can any kind soul take pity on my less than perfect sight and tell me where 
 to 
 find the md5sums and shasums for these downloads?  A URL would be great.  I 
 just can't find them.
 
 https://www.debian.org/devel/debian-installer/?

It ain't listed on that site, but, if you go here, for example -
they'll be there (basically, substract the filename from the download
link):

http://cdimage.debian.org/cdimage/jessie_di_rc2/amd64/iso-cd/

You should see MD5SUM, SHA1SUM, SHA256SUM and SHA512SUM files.

Those files aren't enough actually, as you need appropriate .sign files
too to verify those SUM files.

So, basically you'll need to:

get the needed iso and sum files

gpg --recv-keys 6294BE9B

gpg --verify SHA512SUMS.sign SHA512SUMS # or any other sum file

sha512sum -c SHA512SUMS

Reco


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/20150404013556.1165cba750844be043748...@gmail.com



Re: md5sums and shasums

2015-04-03 Thread Lisi Reisz
On Friday 03 April 2015 23:27:06 Bob Proulx wrote:
 Here is how I arrived there.  I know the sums are stored next to the
 isos in the same directory.  I right-clicked on the link.  Then I
 pasted it into the location bar of the browser.  Then I removed the
 filename portion backing up to the directory.  That left the above
 directory in the url and it dipsplays the SUMS files and signature
 files for the entire directory.

 There is no link to the sums from that page.  There is only the note
 describing the process this way:

   For CD and DVD images, an MD5SUMS file is available in the same
   directory as the images.

Thank you, Bob.  That is very helpful.  Today I simply couldn't find 

  For CD and DVD images, an MD5SUMS file is available in the same
 directory as the images.

I have better times and worse times with my eyes.  

But even when I could see it the other day, I couldn't find the sums. 

I followed your instructions from the page just now, and there they were.  I 
am presumably not savvy enough in the eyes of the developers to be using 
Jessie.  I'm certainly not savvy enough to have succeeded in finding the sums 
without your help.

 I daresay that isn't as convenient as having a direct link.

It isn't that it isn't as convenient, it isn't useful to those of us who are 
less well informed.  I did try, and it didn't help me find anything because I 
didn't understand well enough.

So thank you very much.  The installation I am about to do will be the first 
Jessie installation I have done whose CD I have managed to check.

Lisi


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/201504032342.06612.lisi.re...@gmail.com



Re: md5sums and shasums

2015-04-03 Thread Paul E Condon
On 20150403_2316+0100, Lisi Reisz wrote:
 Can any kind soul take pity on my less than perfect sight and tell me where 
 to 
 find the md5sums and shasums for these downloads?  A URL would be great.  I 
 just can't find them.
 
 https://www.debian.org/devel/debian-installer/?
 
 Thanks
 Lisi

I asked that a not long ago, when RC 2 was announced. It's right in sight
and very inconvenient to use:

You click of the hot link for the cpu type the you want and up pops a pup-up.
Look at it carefully. There is a url of a web site in Sweden, I think. clicking
on it is not effective. You enter the url displayed inside to popup manually
into the menubar, one key stroke at a time. If you get it right, you will
see a list of hot links. Third one, 'cdimage' will take you to the md5  sha
sums.

This is a place where Debian is really not newbie friendly. If one is
a conscientious newbie, you have read all the fine words about using
wget and *never* using a browser to download .iso files, but not a
word about what to type at the command line to make wget go to where
the goodies are. 

-- 
Paul E Condon   
pecon...@mesanetworks.net


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150404035154.ga17...@big.lan.gnu



Re: md5sums and shasums

2015-04-03 Thread Lisi Reisz
On Friday 03 April 2015 23:35:56 Reco wrote:
  Hi.

 On Fri, 3 Apr 2015 23:16:45 +0100

 Lisi Reisz lisi.re...@gmail.com wrote:
  Can any kind soul take pity on my less than perfect sight and tell me
  where to find the md5sums and shasums for these downloads?  A URL would
  be great.  I just can't find them.
 
  https://www.debian.org/devel/debian-installer/?

 It ain't listed on that site, but, if you go here, for example -
 they'll be there (basically, substract the filename from the download
 link):

 http://cdimage.debian.org/cdimage/jessie_di_rc2/amd64/iso-cd/

 You should see MD5SUM, SHA1SUM, SHA256SUM and SHA512SUM files.

 Those files aren't enough actually, as you need appropriate .sign files
 too to verify those SUM files.

 So, basically you'll need to:

 get the needed iso and sum files

 gpg --recv-keys 6294BE9B

 gpg --verify SHA512SUMS.sign SHA512SUMS # or any other sum file

 sha512sum -c SHA512SUMS

Thanks, Reco!  Much appreciated.

Lisi


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/201504040007.28687.lisi.re...@gmail.com