I've been researching md5 applications in terms of attempting to make a recommendation to the repository group on the appropriate format to use in the ASF Repository project.
To date my research shows that both applications support the GNU "checksum filename.ext" format when performing a md5sum (GNU) or cksum (BSD) check against the file/md5 pair. And that the GNU version of md5sum cannot handle the BSD's default md5 format.
Since BSD cksum can read the GNU format, BSD md5 can produce the GNU format, and installations of the GNU toolkit and that md5 file format are much more prevalent than BSD and its format, then my recommendation is that would be the appropriate format to use for the time being.
Its quite clear that the majority of the computers on the internet are not BSD systems, no matter how great the OS is ;-). IMHO, the decision for the appropriate md5 file format should be based on what applications require in the real world, not on which servers Apache actually uses in production.
-Mark Diggory
Shapira, Yoav wrote:
Hi, Well, as always, when there's an established practice I'd like a stronger reason than "it would probably be good" to change it ;) I see what you mean, but I don't know that the GNU md5 is any more prevalent than the BSD md5 or vice versa...
Yoav Shapira Millennium Research Informatics
started-----Original Message----- From: Mark R. Diggory [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 10, 2004 9:52 AM To: Tomcat Developers List Cc: [EMAIL PROTECTED] Subject: Re: Fwd: md5 sums for jakarta downloads
For example here are the outputs of the various signing tools we use at this time:
BSD md5:
md5 commons-collections-3.1.jar
MD5 (commons-collections-3.1.jar) = d1dcb0fbee884bb855bb327b8190af36
while the GNU md5 script generates the following:
[EMAIL PROTECTED] jars]$ md5sum commons-collections-3.1.jar d1dcb0fbee884bb855bb327b8190af36 commons-collections-3.1.jar
And maven just generates and uses: d1dcb0fbee884bb855bb327b8190af36
Yes, the nice thing about BSD md5 is that the -r can be used to make it
look like the GNU md5sum output, it would probably be good if we
to use this as it will be more prevalent and possibly is the closestone
contentcan get to a standard:
md5 -r commons-collections-3.1.jar
d1dcb0fbee884bb855bb327b8190af36 commons-collections-3.1.jar
Mark R. Diggory wrote:
This is the md5 output generated by BSD md5 and not necessarily a
"standard", GNU md5sum generates a different format that is not
"standard" as well. For maven, just the checksum portion of the
tois stored in the file.
It would be nice if there was a standard in this area, but I have yet
projectsee one in the internet community. We have the same problem with generating md5 checksums for the maven repository at the moment.
-Mark
Shapira, Yoav wrote:
Hi,
The format I use for MD5 sums is the standard one. Every other
[mailto:[EMAIL PROTECTED]I know uses this format, so I think if anything this user needs to adjust his preferences ;) However, if there's a standard or spec somewhere that mandates we use md5 -r (reverse output format), then sure, someone point me to it and I'll follow that spec when signing releases.
Yoav Shapira Millennium Research Informatics
-----Original Message-----
From: jean-frederic clere
formattedSent: Tuesday, August 10, 2004 5:26 AM To: Tomcat Developers List Subject: Re: Fwd: md5 sums for jakarta downloads
Pier Fumagalli wrote:
Begin forwarded message:
From: Andy Mudrak <[EMAIL PROTECTED]> Date: 10 August 2004 00:57:44 BST To: [EMAIL PROTECTED] Subject: md5 sums for jakarta downloads
Hi,
I noticed that your MD5 sums on your website are not all
butcorrectly. I specifically downloaded the Tomcat 5.0.27 MD5 file,
and
found this out. Not that it's a big deal or anything like that,
sumit'd be good to have the MD5 properly formatted, that is the MD5
lotand then the file name...
I am not sure that is a good idea: +++ -bash-2.05b$ openssl md5 toto MD5(toto)= efd6b079984c77cd80254ff266e9ab43 +++
And looking in the Jakarta "Binary downloads" I have found that a
---------------------------------------------------------------------of
other MD5 file are using the Tomcat format.
Thanks,
Andy Mudrak
[EMAIL PROTECTED]
---------------------------------------------------------------------To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
-- Mark Diggory Software Developer Harvard MIT Data Center http://www.hmdc.harvard.edu
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
This e-mail, including any attachments, is a confidential business communication, and may contain information that is confidential, proprietary and/or privileged. This e-mail is intended only for the individual(s) to whom it is addressed, and may not be saved, copied, printed, disclosed or used by anyone else. If you are not the(an) intended recipient, please immediately delete this e-mail from your computer system and notify the sender. Thank you.
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
-- Mark R. Diggory Software Developer Harvard MIT Data Center http://www.hmdc.harvard.edu
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]