Missing Checksums?

This forum is for admins who are looking to build or expand their OpenVPN setup.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
closedLoop
OpenVpn Newbie
Posts: 3
Joined: Tue Aug 01, 2017 4:20 pm

Missing Checksums?

Post by closedLoop » Tue Aug 01, 2017 4:30 pm

Greetings. First post; hope I hit the right spot ;)

Simply, I cannot find the verification hashes for the latest 2.4.3 (Stretch) releases:

https://build.openvpn.net/debian/openvp ... o/openvpn/

In an effort to resolve the matter without posting, I even tried googling the md5, sha1, and sha256 sums for the files as downloaded (no luck)...

Where can I find the official sums to verify these downloads?

Thank you.

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: Missing Checksums?

Post by TinCanTech » Tue Aug 01, 2017 11:43 pm

OpenVPN does not believe in file hashes .. they prefer gpg signatures, as can be found
https://community.openvpn.net/openvpn/w ... twareRepos

closedLoop
OpenVpn Newbie
Posts: 3
Joined: Tue Aug 01, 2017 4:20 pm

Re: Missing Checksums?

Post by closedLoop » Wed Aug 02, 2017 3:49 pm

@TinCanTech:

Thank you for stopping by with that information. I did not see any signature associated with this particular file, either at the download dir (see OP) or in the actual deb file content itself.

Also, I'm not sure I understand how this would actually work to secure/verify a given file for manual download (as in this particular example); perhaps you can help me here.

Thank you again.

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: Missing Checksums?

Post by TinCanTech » Wed Aug 02, 2017 4:11 pm

closedLoop wrote:Simply, I cannot find the verification hashes for the latest 2.4.3 (Stretch) releases:

https://build.openvpn.net/debian/openvp ... o/openvpn/
See:
https://build.openvpn.net/debian/openvpn/release/2.4/

I don't know if those GPG keys are valid or used but would presume they are ..

Also see viewtopic.php?f=30&t=23663

Post Reply