Lazarus

Programming => General => Topic started by: QEnnay on October 21, 2020, 06:00:12 pm

Title: SHA256 validation of downloads??
Post by: QEnnay on October 21, 2020, 06:00:12 pm
Just downloaded ..10 and there are no validation files in the Lnux64 .deb Files Folder.

Seems a bit risky.

Is there a better download site than SourceForge?

And, I don't just mean Mirrors, preferably an Open Source kind a thing. :)
Title: Re: SHA256 validation of downloads??
Post by: MarkMLl on October 21, 2020, 06:31:34 pm
Definitve list: https://freepascal.org/download.html

Surely .deb files have an internal validatory hash?

MarkMLl
Title: Re: SHA256 validation of downloads??
Post by: QEnnay on October 21, 2020, 07:06:36 pm
Surely .deb files have an internal validatory hash?

I have no idea, but it would not matter. If nasties were included into the .deb any hash would be updated too unless the hacker was a complete dolt. The .deb is not quite like a compiled .exe, it is more of an instruction list also with some files.

Using a SHAxxx checksum provided by the developer will validate the file as it was when it left the Dev's desk.

Having a SHAxxx independently provided by FPC to validate the download at **my** desk just makes sense.
Title: Re: SHA256 validation of downloads??
Post by: lucamar on October 21, 2020, 08:45:48 pm
IIRC there is somewhere in the download pages a list with hashes for the all distributon packages. Let me see if I can find it ..

Found it! Here it is: Checksums for the official Lazarus releases (http://www.lazarus-ide.org/index.php?page=checksums#2_0_10), MD5, SHA1 y SHA256.
Title: Re: SHA256 validation of downloads??
Post by: QEnnay on October 23, 2020, 09:59:25 pm
Found it! Here it is: Checksums for the official Lazarus releases (http://www.lazarus-ide.org/index.php?page=checksums#2_0_10)

Thanks, a well hidden secret. ;)

ETA: OK, found it on the bottom of the download page, but I was sent straight to the SourceForge list. Might nice to have a link back there for the SHAs. I don't mean put copies on SF, just a link back to www.lazarus-ide.org/
TinyPortal © 2005-2018