Re: Linux Kernel MD5 sums and some question

From: Jon Masters
Date: Thu Oct 27 2005 - 10:10:10 EST


On 10/27/05, Jesper Juhl <jesper.juhl@xxxxxxxxx> wrote:
> On 10/27/05, Chaitanya Hazarey <c.v.hazarey@xxxxxxxxx> wrote:

> > Lately I had some problems compiling the kernel source on my machine.
> > I guess nothing serious, but one thing came to my notice. I was
> > looking for the MD5 sums for the linux kenerl and found none. The Pgp
> > signatures are fine , but there seems no way to check the package.

> Yes, there is a way to check the files; verify the pgp signature. If
> the file has been modified the signature won't validate.

But having signed MD5 sums would be a solution.

That way people can check a). Did they download the kernel properly?
b). Was it genuine? in two distinct steps. Others will think that's a
*really* bad idea :-)

Jon.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/