Re: signify and ftp.eu.openbsd.org

2018-04-12 Thread Janne Johansson
2018-04-11 22:44 GMT+02:00 Peter J. Philipp : > On Wed, Apr 11, 2018 at 10:20:37PM +0200, Paul de Weerd wrote: > > ftp doesn't do this itself, but the error detection in tcp and ssl > > (ok, so that's linked into the ftp binary) do. > > > > The file is unlikely to have been changed in flight. > >

Re: signify and ftp.eu.openbsd.org

2018-04-12 Thread Paul de Weerd
On Wed, Apr 11, 2018 at 10:44:28PM +0200, Peter J. Philipp wrote: | On Wed, Apr 11, 2018 at 10:20:37PM +0200, Paul de Weerd wrote: | > ftp doesn't do this itself, but the error detection in tcp and ssl | > (ok, so that's linked into the ftp binary) do. | > | > The file is unlikely to have been cha

Re: signify and ftp.eu.openbsd.org

2018-04-11 Thread Peter J. Philipp
On Wed, Apr 11, 2018 at 10:20:37PM +0200, Paul de Weerd wrote: > ftp doesn't do this itself, but the error detection in tcp and ssl > (ok, so that's linked into the ftp binary) do. > > The file is unlikely to have been changed in flight. OK, odd. What I find odd is that the SHA256.sig file I got

Re: signify and ftp.eu.openbsd.org

2018-04-11 Thread Paul de Weerd
On Wed, Apr 11, 2018 at 09:52:41PM +0200, Peter J. Philipp wrote: | So I re-downloaded this file on another machine. It turned out to have your | checksum (sha256 -b) and upon downloading another SHA256.sig it signify'ed | correctly. But this leads me to ask questions: | | 1. doesn't the https

Re: signify and ftp.eu.openbsd.org

2018-04-11 Thread Peter J. Philipp
On Wed, Apr 11, 2018 at 08:45:40PM +0200, Paul de Weerd wrote: > Hi Peter, Hello Paul, > I downloaded those exact two files from the same IP addresses and the > signature verified OK for me: > > [weerd@pom] $ ftp -4 https://ftp.eu.openbsd.org/pub/OpenBSD/snapshots/amd64/i > > > Trying 193.156.2

Re: signify and ftp.eu.openbsd.org

2018-04-11 Thread Stuart Henderson
On 2018-04-11, Peter J. Philipp wrote: > Sorry to be writing this twice.  Not my day. > > The complete path where I downloaded this from was > https://ftp.eu.openbsd.org/pub/OpenBSD/snapshots/amd64/install63.iso > > including the SHA256.sig which I check against. > > Also: > > beta$ dig ftp.eu.ope

Re: signify and ftp.eu.openbsd.org

2018-04-11 Thread Paul de Weerd
Hi Peter, On Wed, Apr 11, 2018 at 07:58:56PM +0200, Peter J. Philipp wrote: | Sorry to be writing this twice.  Not my day. | | The complete path where I downloaded this from was | https://ftp.eu.openbsd.org/pub/OpenBSD/snapshots/amd64/install63.iso | | including the SHA256.sig which I check agai

Re: signify and ftp.eu.openbsd.org

2018-04-11 Thread Peter J. Philipp
Sorry to be writing this twice.  Not my day. The complete path where I downloaded this from was https://ftp.eu.openbsd.org/pub/OpenBSD/snapshots/amd64/install63.iso including the SHA256.sig which I check against. Also: beta$ dig ftp.eu.openbsd.org +short 193.156.26.18 beta$ dig ftp.eu.openbsd.o