From owner-freebsd-security@freebsd.org Sun Jan 10 15:02:53 2016 Return-Path: Delivered-To: freebsd-security@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6482AA6B62B for ; Sun, 10 Jan 2016 15:02:53 +0000 (UTC) (envelope-from clint@clintarmstrong.net) Received: from mail-ig0-x232.google.com (mail-ig0-x232.google.com [IPv6:2607:f8b0:4001:c05::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 3AA2F1CEB for ; Sun, 10 Jan 2016 15:02:53 +0000 (UTC) (envelope-from clint@clintarmstrong.net) Received: by mail-ig0-x232.google.com with SMTP id z14so86066676igp.1 for ; Sun, 10 Jan 2016 07:02:53 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=clintarmstrong.net; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-type; bh=NClA0QvcJLmgY22AOwI3OYjZOJt8X3m39Se5TjkW1Vg=; b=p7ZjG1eD4hoDtbtxhbZUItVfE/Bk1FH7Iz82mcb1marBu22jUSgE6rhv4CbyWcKLF8 32CifCkSlZShLDo4+LBcmfY0ue6x9DxAMOZjULfZVNufOy6M9PdgRT6z1RXoPvaxAGZC m9ZeWvkYlF0BJkI4+7WcJmCGkedCuSuIZga0Q= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-type; bh=NClA0QvcJLmgY22AOwI3OYjZOJt8X3m39Se5TjkW1Vg=; b=k7tILR77DigmMHmqjI6XB5l+T9Q2DGfkCQsT7GEBrUvVsXd+cQmvEjMPnoJszbh1eu dwoS//YBYxa7wjF6MdsirIUGGLJvjuAac/JFuwBcVRTFr/05ddJFXnnZRL/648Kbqt3a 8XAA4CPsyNvyddBiPCj2/4YrBTpPh1aCA1FnQibvhn0UuENTTePjL3fvGjt12v6i7WS0 bZSd0LzZ4vOJI2g7E6Xbw67m+MXmSwY0CFWLhW+v/a7UlhmHNzBUrW2Vktw2iJfjWFuw sMQ1WLZGdiYJXqPTvE40s7u537VsRTq8binHSg7VqweoynA2WlSb/bDc67LxaARzgh6F UPwg== X-Gm-Message-State: ALoCoQl0LVMql3KX00MyZD2RfBNXxD62bbYjQTpzv4Wlf5s4HOkjcgStv2S7y9cEc/ArKvrx1USm86hOdHhKr7NKtJOcDr4d/Q== X-Received: by 10.50.134.129 with SMTP id pk1mr22887igb.11.1452438172524; Sun, 10 Jan 2016 07:02:52 -0800 (PST) MIME-Version: 1.0 References: In-Reply-To: From: Clint Armstrong Date: Sun, 10 Jan 2016 15:02:42 +0000 Message-ID: Subject: Re: Signed Checksums for release archives To: Dmitry Morozovsky Cc: freebsd-security@freebsd.org Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.20 X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 10 Jan 2016 15:02:53 -0000 The signed checksums linked on that page only include checksums for the .img and .iso images. Not for the .txz archives. On Sun, Jan 10, 2016 at 9:17 AM Dmitry Morozovsky wrote: > On Sun, 10 Jan 2016, Clint Armstrong wrote: > > > The signed checksums at > > https://www.freebsd.org/releases/10.2R/signatures.html provide a way to > > verify installation sources, but there do not appear to be any signed > > checksums for the release archives at > > ftp://ftp.freebsd.org/pub/FreeBSD/releases/amd64/amd64/10.2-RELEASE/. Is > > there another source of signed checksums hosted elsewhere or any other > way > > to verify archive downloads? > > On the release page: https://www.freebsd.org/releases/10.2R/ > > > -- > Sincerely, > D.Marck [DM5020, MCK-RIPE, DM3-RIPN] > [ FreeBSD committer: marck@FreeBSD.org ] > ------------------------------------------------------------------------ > *** Dmitry Morozovsky --- D.Marck --- Wild Woozle --- marck@rinet.ru *** > ------------------------------------------------------------------------ >