Work at SourceForge, help us to make it a better place! We have an immediate need for a Support Technician in our San Francisco or Denver office.

Close

checksums for Password Safe

2013-09-26
2013-09-26
  • Brittney Smith
    Brittney Smith
    2013-09-26

    Haven't seen checksums for PWS files anywhere. Did see an old post from yrs ago, where Rony alluded to using them.

    Are checksums still offered or included in some other files?

    Thanks.

     
  • Rony Shapiro
    Rony Shapiro
    2013-09-26

    Each file has a corresponding .sig file, which is a checksum (hash) signed with my private key.
    You can also see the checksum by clicking on the info (i) button on each file.
    Finally, I put the checksums of the files in the release announcement of the version that goes our to the mailing lists:

    SHA-1 checksums:
    c3410ed4f6a2ee2680811bc1c62c46ff36d8ba47 pwsafe-3.32.exe
    c6260df437bcd69ebf99ae27355314950bbc97d1
    pwsafe-3.32.msi
    8e0b948347d8bf8dce3d66b59ac49aa3163655ec pwsafe-3.32-bin.zip
    e94ee8dac235289b2cba28ec75faea9b5ccac22d
    pwsafe-3.32-src.zip

    a3aaba92c5fd4a90ff8ce3df737bdae08667f415 passwordsafe-debian-0.92BETA.amd64.deb
    60a79d825ee0a5df7f56d4f89e95e9f140deefba
    passwordsafe-debian-0.92BETA.i686.deb
    fed17b38134095e58c81e4d15cfcbac58f54c79f passwordsafe-ubuntu-0.92BETA.amd64.deb
    55cf0c3aaa5ad035754cb46f399c343acec0fef9
    passwordsafe-ubuntu-0.92BETA.i686.deb

    d6048dc5f2fc626aa4a0d8d9c87d0b1b0bd69d6c pwsafe-0.92BETA-2.i386.rpm
    9e6b60cdba691db5b5a50aa71fe87d6df8657750
    pwsafe-0.92BETA-2.src.rpm

     
  • Brittney Smith
    Brittney Smith
    2013-09-26

    Thanks. I'd guess a very low % of users know the info ('i') button on SF contain checksums. I've used SF well > 10 yrs & didn't know it / never saw mention of it (a description may be buried somewhere).

    Like me, I'd guess most think the 'i' button is associated w/ the downloads graph beside it.

    I even searched "checksums" on PWS & some other forums just now & found no mention of the info button / checksums.

    Don't know if there's a way to make this more clear or add a note on the d/l page (for others benefit). Not everyone wants to sign up for mailing lists.

    On PWS home page / downloads, no mention of checksums:

    ''In addition, you can get all the downloads (installer program, .msi format, zip file and source), including previous versions, from here.''

    Quick check of several heavily d/l'd files on SF (> 10,000 / wk), many didn't have the info button. Nor an obvious checksum file.

    You may have no ability to add a note on the SF d/l page, like "click info button for checksums." I could create an SF feature request.

    Many users don't know how to use a sig file or don't want to go to trouble of using extra software. Most probably aren't concerned about file tampering - on SF - just that it's a valid d/l.
    Thanks.