Thanks, but the MD5 checksums file for the Tomcat installers have the filename 
in them (in the contents of the .md5 file, versus implied by the name of the 
.md5 file)

https://www.apache.org/dist/tomcat/tomcat-8/v8.0.9/bin/apache-tomcat-8.0.9.zip.md5

versus 

http://repo.maven.apache.org/maven2/org/eclipse/tycho/org.eclipse.tycho.embedder.shared/0.20.0/org.eclipse.tycho.embedder.shared-0.20.0.jar.md5

The Tomcat md5 file is one that a tool like md5sum generates, and is the 
standard format that checksum validation tools expect. The tycho one is a 
standard maven-generated checksum file. It only contains the checksum, no path 
to the file because it's inferred by removing the ".md5", and consequently all 
these tools to validate the checksum don't work with the checksum files 
published in M2 repo. 

> -----Original Message-----
> From: Mark Eggers [mailto:[email protected]]
> Sent: Monday, August 04, 2014 12:00 PM
> To: Maven Users List
> Subject: Re: MD5 checksum validation tool [Windows]?
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Justin,
> 
> This seems to work. It's marked as beta software, so read and use with
> caution. I just downloaded it and ran it against a download of Apache Tomcat.
> The check worked as expected.
> 
> http://www.exactfile.com/
> 
> . . . just my two cents
> /mde/
> 
> On 8/4/2014 9:41 AM, Justin Georgeson wrote:
> > Thanks Paul. I don't see HashTab as being able to directly read the
> > .md5 file. Users would have to open the .md5 file in a text editor,
> > then copy/paste. And sadly this tiny bit of effort is actually being
> > deemed an undue burden. It literally has to be as simple as
> > double-click the .md5 file and get nice green graphic that says
> > everything is ok. HashCheck is the tool people are wanting to use, but
> > that requires the relative path be included in the md5 file.
> > I've submitted an enhancement request but their last release was in
> > 2009 so I'm not hopeful.
> >
> >> -----Original Message----- From: [email protected]
> >> [mailto:[email protected]] On Behalf Of Paul Benedict
> >> Sent: Monday, August 04, 2014 11:18 AM To: Maven Users List
> >> Subject: Re: MD5 checksum validation tool [Windows]?
> >>
> >> Yup. I've used HashTab for years.
> >> http://www.implbits.com/hashtab.aspx
> >>
> >>
> >> Cheers, Paul
> >>
> >>
> >> On Mon, Aug 4, 2014 at 11:16 AM, Justin Georgeson
> >> <[email protected]> wrote:
> >>
> >>> All the checksum validation tools I've found only seem to support
> >>> files with format produced by the md5sum tool, ie -
> >>>
> >>> checksum1 relative/path/file1 checksum2 relative/path/to/file2 ...
> >>>
> >>> But Maven publishes sibling files of the same name with ".md5"
> >>> appended, and no relative path in the file. Does anyone know of a
> >>> tool on Windows (shell extension, standalone GUI) that people could
> >>> use after downloading the artifact (in this particular case it's an
> >>> executable installer) and the md5 file and just double-click the md5
> >>> file to validate the download (or drag/drop the artifact and md5
> >>> file)?
> >>>
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.13 (MingW32)
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
> 
> iQEcBAEBAgAGBQJT37v+AAoJEEFGbsYNeTwtp94IAKJtHuPL/glPl3Gxxd9aqvD
> A
> Hau/0nrphJWPSrKmhGV+K3U9Psh7ZnwA5/SDtFtMo3Oa7seGZ/DPYqxwI3oZ
> XDcM
> 7O+20YNvxCiO7fhMg/bcR/HsbqkCreijj2nkeJRKTcTSx0p68GJf/V3Kh9c70ZuA
> RuP3otwcHx2x+Yl7CbumGm+i+ayIkM0SYiArjhjnozAA3xb+Q7HCRuWk/hJREH
> 3T
> nqce0pWx4t71kkBuF+r7clGC5kGm+XdzD+SzlJKoPO6UHFS/Ujql/a/jpqQRI363
> vKdMbpwgZDUEZFGP4TmX6oEV6+oHylQLWWlXCNS9cGfgf2uaBY3uevXSeQh
> /7SU=
> =/+sR
> -----END PGP SIGNATURE-----
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]


----------------------------------------------------------------------
This e-mail, including any attached files, may contain confidential and 
privileged information for the sole use of the intended recipient.  Any review, 
use, distribution, or disclosure by others is strictly prohibited.  If you are 
not the intended recipient (or authorized to receive information for the 
intended recipient), please contact the sender by reply e-mail and delete all 
copies of this message.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to