[yt-dev] Call for testing: SHA512 in the install_script instead of md5 on the server

[Kacper Kowalik]

On 01/25/2012 08:52 PM, Matthew Turk wrote:
> Hi Casey,
> 
> Rats!  Is there an sha sum utility of any type?  I thought some people
> in IRC found it on their mac.
I believe that on OSX you need to do it like this:
shasum -a 512 -p <FILE>

Kacper


> 
> -Matt
> 
> On Wed, Jan 25, 2012 at 1:46 PM, Casey W. Stark <caseywstark at gmail.com> wrote:
>> Hi Matt.
>>
>> I don't think macs have sha512sum. I get:
>>
>> Awesome!  Here we go.
>>
>> Using wget
>> Downloading HDF5
>> Downloading hdf5-1.8.7.tar.gz from yt-project.org
>> 2012-01-25 13:22:51 URL:http://yt-project.org/dependencies/hdf5-1.8.7.tar.gz
>> [7827944/7827944] -> "hdf5-1.8.7.tar.gz" [1]
>> I am unable to locate sha512sum.  FILE INTEGRITY NOT VERIFIED.
>> Downloading zlib-1.2.3.tar.bz2 from yt-project.org
>> ...
>>
>> Best,
>> Casey
>>
>>
>> On Wed, Jan 25, 2012 at 1:19 PM, Matthew Turk <matthewturk at gmail.com> wrote:
>>>
>>> Hi all,
>>>
>>> Currently to verify file integrity with the install script we download
>>> sidecar md5 file from yt-project.org.  These aren't versioned, and md5
>>> itself is largely deprecated for this.
>>>
>>> I've created a new sha512-using version of the install script, which
>>> uses sha512 hashes stored *in the install script* to verify file
>>> integrity.  This way any time these change we will be notified of
>>> them.  I'd like it if a few people could test this -- I have -- on
>>> pristine systems.  It changes both how the files are downloaded and it
>>> now uses sha512sum, which should be available on most systems
>>> (according to Kacper :).
>>>
>>> You can do this by:
>>>
>>> wget
>>> https://bitbucket.org/MatthewTurk/yt/raw/367ea3bfff2e/doc/install_script.sh
>>>
>>> and then running it, but maybe supplying an alternate directory rather
>>> than the default.
>>>
>>> Thanks for any feedback.
>>>
>>> -Matt
>>> _______________________________________________
>>> yt-dev mailing list
>>> yt-dev at lists.spacepope.org
>>> http://lists.spacepope.org/listinfo.cgi/yt-dev-spacepope.org
>>
>>
>>
>> _______________________________________________
>> yt-dev mailing list
>> yt-dev at lists.spacepope.org
>> http://lists.spacepope.org/listinfo.cgi/yt-dev-spacepope.org
>>
> _______________________________________________
> yt-dev mailing list
> yt-dev at lists.spacepope.org
> http://lists.spacepope.org/listinfo.cgi/yt-dev-spacepope.org


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 900 bytes
Desc: OpenPGP digital signature
URL: <http://lists.spacepope.org/pipermail/yt-dev-spacepope.org/attachments/20120125/a3e8df67/attachment.pgp>