[yt-dev] Call for testing: SHA512 in the install_script instead of md5 on the server
Matthew Turk
matthewturk at gmail.com
Wed Jan 25 11:19:28 PST 2012
Hi all,
Currently to verify file integrity with the install script we download
sidecar md5 file from yt-project.org. These aren't versioned, and md5
itself is largely deprecated for this.
I've created a new sha512-using version of the install script, which
uses sha512 hashes stored *in the install script* to verify file
integrity. This way any time these change we will be notified of
them. I'd like it if a few people could test this -- I have -- on
pristine systems. It changes both how the files are downloaded and it
now uses sha512sum, which should be available on most systems
(according to Kacper :).
You can do this by:
wget https://bitbucket.org/MatthewTurk/yt/raw/367ea3bfff2e/doc/install_script.sh
and then running it, but maybe supplying an alternate directory rather
than the default.
Thanks for any feedback.
-Matt
More information about the yt-dev
mailing list