Mailing-List: contact flex-dev-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: flex-dev@incubator.apache.org
Received-SPF: pass (nike.apache.org: domain of cframpto@adobe.com designates
 64.18.1.29 as permitted sender)
From: Carol Frampton <cframpto@adobe.com>
To: "flex-dev@incubator.apache.org" <flex-dev@incubator.apache.org>
Date: Fri, 20 Jul 2012 13:07:03 -0700
Subject: Re: InstallApacheFlex - TODO
Thread-Topic: InstallApacheFlex - TODO
Thread-Index: Ac1msz2IDW9rhXkXQj6HLLDFqEKMsQ==
Message-ID: <CC2F324B.184B4%cframpto@adobe.com>
In-Reply-To: 
 <CACK5iZcOR+Msr3ZzyhgKtF10N2xWX69B1fDgkGzkNPFzyPvb4w@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
user-agent: Microsoft-MacOutlook/14.2.3.120616
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0


On 7/20/12 3 :17PM, "Om" <bigosmallm@gmail.com> wrote:

>>>4.  The installer app needs to programatically verify the downloaded
>>>flex
>> >binaries' signatures.  I have very little experience with crypto
>> >algorithms.  Can someone take this up?  Even if someone can explain the
>> >steps to do this, I can get it done.
>>
>> Are you going to check the signature (.asc) or the checksum (.md5)?  I'm
>> sure the later is much easier.

>>
>>
>.md5 it is, then ;-)  As I said, I dont know how to go about doing this
>(yet)  I will do some research on this when I get a chance.

It looks like com.adobe.com.crypto.MD5Stream in
https://github.com/mikechambers/as3corelib will do what you need.  It has
a BSD license so we can use it with no issues.


Carol