Missing Checksums?

closedLoop

Greetings. First post; hope I hit the right spot 😉

Simply, I cannot find the verification hashes for the latest 2.4.3 (Stretch) releases:

https://build.openvpn.net/debian/openvpn/release/2.4/pool/stretch/main/o/openvpn/

In an effort to resolve the matter without posting, I even tried googling the md5, sha1, and sha256 sums for the files as downloaded (no luck)...

Where can I find the official sums to verify these downloads?

Thank you.

TinCanTech

OpenVPN does not believe in file hashes .. they prefer gpg signatures, as can be found
https://community.openvpn.net/openvpn/wiki/OpenvpnSoftwareRepos

closedLoop

@TinCanTech:

Thank you for stopping by with that information. I did not see any signature associated with this particular file, either at the download dir (see OP) or in the actual deb file content itself.

Also, I'm not sure I understand how this would actually work to secure/verify a given file for manual download (as in this particular example); perhaps you can help me here.

Thank you again.

TinCanTech

closedLoop wroteSimply, I cannot find the verification hashes for the latest 2.4.3 (Stretch) releases:

https://build.openvpn.net/debian/openvpn/release/2.4/pool/stretch/main/o/openvpn/

See:
https://build.openvpn.net/debian/openvpn/release/2.4/

I don't know if those GPG keys are valid or used but would presume they are ..

Also see https://forums.openvpn.net/viewtopic.php?f=30&t=23663