Re: [Astlinux-users] Checksums or digital signatures for ISO downloads

[Dr. P. V. <pv...@uo...>]

Hi Lonnie,

great job, thanks a lot. This is an important step towards more
security.

Did you think about providing additionally a detatched GnuPG signature
file for iso.sha256.txt as iso.sha256.txt.asc as well?

Peter


On Sat, 15 Feb 2020 11:05:39 -0600
Lonnie Abelbeck <li...@lo...> wrote:

> > On Feb 10, 2020, at 4:34 PM, Dr. Peter Voigt <pv...@uo...> wrote:
> > 
> > May be I am looking into a wrong direction but where can I find
> > checksums (SHA2) or digital signatures for the provided ISO images  
> 
> Hi Peter,
> 
> The AstLinux Project web page now shows SHA256 hashes for the ISO's
> (using a little javascript).
> 
> https://www.astlinux-project.org/
> 
> Or, you can retrieve a single file containing all the hashes ...
> 
> https://www.astlinux-project.org/iso.sha256.txt
> 
> 
> Note this "iso.sha256.txt" file is not located on the same server as
> the actual .iso files, but rather on our Github web page.
> 
> Over time, if you need to view the SHA256 for and old .iso file, you
> can view the commit history of the iso.sha256.txt file ...
> 
> https://github.com/astlinux-project/astlinux-project.github.io/commits/master/iso.sha256.txt
> 
> 
> Thanks for the suggestion, Peter.
> 
> Lonnie
> 
> 
> 
> _______________________________________________
> Astlinux-users mailing list
> Ast...@li...
> https://lists.sourceforge.net/lists/listinfo/astlinux-users
> 
> Donations to support AstLinux are graciously accepted via PayPal to
> pa...@kr....