Yes, well, I actually do not think much thought has gone into this subject at Apache, until know I think perople have thought the .md5 file format was a standard or something.

I've been researching md5 applications in terms of attempting to make a recommendation to the repository group on the appropriate format to use in the ASF Repository project.

To date my research shows that both applications support the GNU "checksum filename.ext" format when performing a md5sum (GNU) or cksum (BSD) check against the file/md5 pair. And that the GNU version of md5sum cannot handle the BSD's default md5 format.

Since BSD cksum can read the GNU format, BSD md5 can produce the GNU format, and installations of the GNU toolkit and that md5 file format are much more prevalent than BSD and its format, then my recommendation is that would be the appropriate format to use for the time being.

Its quite clear that the majority of the computers on the internet are not BSD systems, no matter how great the OS is ;-). IMHO, the decision for the appropriate md5 file format should be based on what applications require in the real world, not on which servers Apache actually uses in production.

-Mark Diggory

Shapira, Yoav wrote:

Hi,
Well, as always, when there's an established practice I'd like a
stronger reason than "it would probably be good" to change it ;)  I see
what you mean, but I don't know that the GNU md5 is any more prevalent
than the BSD md5 or vice versa...

Yoav Shapira
Millennium Research Informatics




-----Original Message-----
From: Mark R. Diggory [mailto:[EMAIL PROTECTED]
Sent: Tuesday, August 10, 2004 9:52 AM
To: Tomcat Developers List
Cc: [EMAIL PROTECTED]
Subject: Re: Fwd: md5 sums for jakarta downloads

For example here are the outputs of the various signing tools we use at
this time:

BSD md5:



md5 commons-collections-3.1.jar


MD5 (commons-collections-3.1.jar) = d1dcb0fbee884bb855bb327b8190af36

while the GNU md5 script generates the following:

[EMAIL PROTECTED] jars]$ md5sum commons-collections-3.1.jar
d1dcb0fbee884bb855bb327b8190af36  commons-collections-3.1.jar

And maven just generates and uses:
d1dcb0fbee884bb855bb327b8190af36

Yes, the nice thing about BSD md5 is that the -r can be used to make it
look like the GNU md5sum output, it would probably be good if we


started


to use this as it will be more prevalent and possibly is the closest


one


can get to a standard:



md5 -r commons-collections-3.1.jar


d1dcb0fbee884bb855bb327b8190af36 commons-collections-3.1.jar


Mark R. Diggory wrote:



This is the md5 output generated by BSD md5 and not necessarily a
"standard", GNU md5sum generates a different format that is not
"standard" as well. For maven, just the checksum portion of the


content


is stored in the file.

It would be nice if there was a standard in this area, but I have yet


to


see one in the internet community. We have the same problem with
generating md5 checksums for the maven repository at the moment.

-Mark

Shapira, Yoav wrote:



Hi,
The format I use for MD5 sums is the standard one. Every other


project


I know uses this format, so I think if anything this user needs to
adjust his preferences ;)  However, if there's a standard or spec
somewhere that mandates we use md5 -r (reverse output format), then
sure, someone point me to it and I'll follow that spec when signing
releases.

Yoav Shapira
Millennium Research Informatics





-----Original Message-----
From: jean-frederic clere


[mailto:[EMAIL PROTECTED]


Sent: Tuesday, August 10, 2004 5:26 AM
To: Tomcat Developers List
Subject: Re: Fwd: md5 sums for jakarta downloads

Pier Fumagalli wrote:



Begin forwarded message:




From: Andy Mudrak <[EMAIL PROTECTED]>
Date: 10 August 2004 00:57:44 BST
To: [EMAIL PROTECTED]
Subject: md5 sums for jakarta downloads

Hi,



I noticed that your MD5 sums on your website are not all


formatted


correctly. I specifically downloaded the Tomcat 5.0.27 MD5 file,


and



found this out. Not that it's a big deal or anything like that,


but


it'd be good to have the MD5 properly formatted, that is the MD5


sum


and then the file name...


I am not sure that is a good idea:
+++
-bash-2.05b$ openssl md5  toto
MD5(toto)= efd6b079984c77cd80254ff266e9ab43
+++

And looking in the Jakarta "Binary downloads" I have found that a


lot


of



other
MD5 file are using the Tomcat format.




Thanks,



Andy Mudrak

[EMAIL PROTECTED]










---------------------------------------------------------------------


To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]







---------------------------------------------------------------------


To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



--
Mark Diggory
Software Developer
Harvard MIT Data Center
http://www.hmdc.harvard.edu

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]






This e-mail, including any attachments, is a confidential business communication, and 
may contain information that is confidential, proprietary and/or privileged.  This 
e-mail is intended only for the individual(s) to whom it is addressed, and may not be 
saved, copied, printed, disclosed or used by anyone else.  If you are not the(an) 
intended recipient, please immediately delete this e-mail from your computer system 
and notify the sender.  Thank you.


--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]





--
Mark R. Diggory
Software Developer
Harvard MIT Data Center
http://www.hmdc.harvard.edu


--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]



Reply via email to