tag:blogger.com,1999:blog-9079308506459446172.post2519719601563082365..comments2023-06-23T09:41:17.219-06:00Comments on SmoogeSpace: Verify Fedora ISOsStephen Smoogenhttp://www.blogger.com/profile/17026786034163911165noreply@blogger.comBlogger4125tag:blogger.com,1999:blog-9079308506459446172.post-79990405210482115842009-11-19T08:46:48.361-07:002009-11-19T08:46:48.361-07:00The interesting thing was that the Fedora 11 check...The interesting thing was that the Fedora 11 checksums were gpg signed with sha256 but it seems to have caused many problems with certain tools which weren't able to handle sha256 gpg. So it was moved back to SHA1 for better usability.<br /><br />My guess is that there will be text in the future saying SHA256 checksums or such.Stephen Smoogenhttps://www.blogger.com/profile/17026786034163911165noreply@blogger.comtag:blogger.com,1999:blog-9079308506459446172.post-57203776303039236322009-11-19T03:38:17.095-07:002009-11-19T03:38:17.095-07:00I was falling into the same trap and downloaded th...I was falling into the same trap and downloaded the DVD twice. I don't see many pgp signatures so did not conclude that it is the pgp-key with the sha1 hash... possibly one could have also concluded by the length of the hashes that they are not sha1 bur common, how often does one see different hashes...<br /><br />One way out would be to use sha256 for the signature as well I would say...Stefanhttps://www.blogger.com/profile/02396701234747192297noreply@blogger.comtag:blogger.com,1999:blog-9079308506459446172.post-49249716495472503762009-11-18T21:58:02.510-07:002009-11-18T21:58:02.510-07:00You could also download with a metalink, which lis...You could also download with a metalink, which lists mirrors & a checksum that download clients will automatically use to verify the file.Ant Bryanhttps://www.blogger.com/profile/16072492089528943166noreply@blogger.comtag:blogger.com,1999:blog-9079308506459446172.post-21045060923487413732009-11-18T18:33:54.003-07:002009-11-18T18:33:54.003-07:00This is indeed confusing. There's a bug report...This is indeed confusing. There's a bug report here: https://bugzilla.redhat.com/show_bug.cgi?id=515715Solid Smokehttps://www.blogger.com/profile/04002905990957500881noreply@blogger.com