On Friday 30 October 2009 08:31:03 Spetznaz wrote: > I've decided I'd like to try out Freenet, so I downloaded the .jar file and > the GPG-signature file. When I check out the gpg-signature, I get the > following results: > > gpg --verify new_installer_offline_1238.jar.sig > new_installer_offline_1238.jar > gpg: Signature made Tue 27 Oct 2009 01:22:14 PM EDT using RSA key ID > BEC4F4C3 > gpg: BAD signature from "Matthew John Toseland (2008-2010 key) > <t...@amphibian.dyndns.org>"
This is because the certificate is configured to use SHA-1 but gpg is configured to use SHA-256 for digest. You should be able to verify this ... somehow ... > > >From what I can see on the download site, there don't appear to be any > hashes to verify whether the downloads are correct or not. I've made two > download attempts, one using Firefox, and the other using wget, and I get > the same results, so it's not the result of a failed download. Depends on how you access them e.g. https://checksums.freenetproject.org/latest/[filename] optionally .sha1 ... > > Needless to say, I didn't attempt to install when the GPG-signature check > failed. > > Any ideas? > > Here are the hashes of both the .jar file and the GPG-signature file: > > new_installer_offline_1238.jar: > > MD5: F1 F8 2C 1C 8A 08 0F 15 10 19 75 55 72 F6 BE 59 > > SHA1: CB29 1DA7 2EFC 2407 28D0 C6CA FF00 AF69 74C0 8303 > > SHA256: FF6BA594 1C80777E 81BF73ED 5C550663 8FA49A3B 96E7A6B4 A637E9A0 > D7B56876 > > =========== > > new_installer_offline_1238.jar.sig: > > MD5: 68 71 78 A4 43 EB C4 4C F8 5A B5 C0 C6 CB C8 23 > > SHA1: DA34 8E12 BA11 913A 462E 72E8 D5B3 4B6D AC2F 0706 > > SHA256: 8172A0F6 1DAECFF8 0A1DEFD2 8A44BB4E 8DB51806 66BAB3D9 F80AF7F4 > 19216A24 > > > Spetznaz
signature.asc
Description: This is a digitally signed message part.
_______________________________________________ Support mailing list Support@freenetproject.org http://news.gmane.org/gmane.network.freenet.support Unsubscribe at http://emu.freenetproject.org/cgi-bin/mailman/listinfo/support Or mailto:support-requ...@freenetproject.org?subject=unsubscribe
