openoffice-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From mar...@apache.org
Subject svn commit: r1508193 - /openoffice/ooo-site/trunk/content/download/checksums.html
Date Mon, 29 Jul 2013 19:45:20 GMT
Author: marcus
Date: Mon Jul 29 19:45:19 2013
New Revision: 1508193

URL: http://svn.apache.org/r1508193
Log:
Created a webpage to describe how to verify downloads with checksums

Added:
    openoffice/ooo-site/trunk/content/download/checksums.html   (with props)

Added: openoffice/ooo-site/trunk/content/download/checksums.html
URL: http://svn.apache.org/viewvc/openoffice/ooo-site/trunk/content/download/checksums.html?rev=1508193&view=auto
==============================================================================
--- openoffice/ooo-site/trunk/content/download/checksums.html (added)
+++ openoffice/ooo-site/trunk/content/download/checksums.html Mon Jul 29 19:45:19 2013
@@ -0,0 +1,284 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" />
+<head>
+  <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
+  <title>Apache OpenOffice - How to verify downloads with checksum files?</title>
+  <script type="text/javascript" src="../scripts/entourage.js"></script>
+  <style type="text/css">
+  /* <![CDATA[ */
+  /*-------------------- Exceptions on standard css -----------------------*/
+  @import "styles.css";
+  @import "exceptions.css";
+  /* ]]> */
+  </style>
+</head>
+
+<body>
+
+<script type="text/javascript">
+  <!--
+  entourage.initialize();
+  // -->
+</script>	
+
+<h1>Apache OpenOffice - How to verify downloads with checksum files?</h1>
+<br />
+
+<ul>
+  <li><h3><a href="other.html"    title="Get the checksums for all Apache
OpenOffice builds and files">
+  Get the checksums for all Apache OpenOffice builds and files</a></h3></li>
+  <br />
+  <li><h3><a href="#asc_win"      title="Verify with ASC and KEYS hashes on
Windows">ASC and KEYS - Windows</a></h3></li>
+  <li><h3><a href="#asc_linux"    title="Verify with ASC and KEYS hashes on
Linux">ASC and KEYS - Linux</a></h3></li>
+  <li><h3><a href="#asc_macos"    title="Verify with ASC and KEYS hashes on
Mac OS">ASC and KEYS - Mac OS</a></h3></li>
+  <li><h3><a href="#md5_win"      title="Verify with MD5 checksums on Windows">MD5
- Windows</a></h3></li>
+  <li><h3><a href="#md5_linux"    title="Verify with MD5 checksums on Linux">MD5
- Linux</a></h3></li>
+  <li><h3><a href="#md5_macos"    title="Verify with MD5 checksums on Mac
OS">MD5 - Mac OS</a></h3></li>
+  <li><h3><a href="#sha256_win"   title="Verify with SHA256 checksums on Windows">SHA256
- Windows</a></h3></li>
+  <li><h3><a href="#sha256_linux" title="Verify with SHA256 checksums on Linux">SHA256
- Linux</a></h3></li>
+  <li><h3><a href="#sha256_macos" title="Verify with SHA256 checksums on Mac
OS">SHA256 - Mac OS</a></h3></li>
+  <br />
+  <li><h3><a href="#no_match"     title="What to do when the checksums do
not match?">
+  What to do when the checksums do not match?</a></h3></li>
+  <br />
+  <li><h3><a href="#notes"        title="Please read the important notes before
downloading and using Apache OpenOffice">
+  Important Notes</a></h3></li>
+</ul>
+<br />
+
+<hr style="display: block;"/>
+
+<h3>How to verify your download with ASC, MD5, SHA256 checksums?</h3>
+
+<p>A checksum and hash prcossed on the files that were downloaded is a way to make
sure that the content is authentic and
+was not manipulated by an unauthorized third party, and has not been damaged during the download
process.</p>
+<br />
+
+<h4>Verify with ASC and KEYS hashes</h4>
+
+<p id="asc_win"><b>This is how you verify with ASC and KEYS hashes on Windows</b></p>
+<br />
+
+<ul>
+  <li><a href="http://gpg4win.org/download.html" title="Download 'Gpg4win' (by Intevation
GmbH, Germany)">
+  Download and install "Gpg4win" (by Intevation GmbH, Germany)</a>. "Gpg4win" (full
name is "GNU Privacy Guard for Windows")
+  is used to encrypt data.</li>
+  <li>For verifying the hashes you need the program "GnuPg". This is a tool that runs
not in the graphical mode but in the
+  command prompt of Windows. Therefore you have to enter always the full path (default location
after installation:
+  <code>C:\Program Files\Gnu\GnuPg\gpg.exe</code>) until you add it to the <code>$PATH</code>
system environment
+  variable.</li>
+  <li>Save the following file with your Internet browser to the location where the
downloaded AOO file is stored:</li>
+  <li><pre>https://people.apache.org/keys/group/openoffice.asc</pre></li>
+  <li>Open the start menu and enter <code>cmd.exe</code> into the search
box.</li>
+  <li>Now change to the directory with the downloaded AOO and ASC file, import and
verify with the following commands:</li>
+  <li><pre>cd &lt;path_to_AOO_and_ASC_file&gt;</pre></li>
+  <li><pre>C:\Program Files\Gnu\GnuPg\gpg.exe --import openoffice.asc</pre></li>
+  <li><pre>C:\Program Files\Gnu\GnuPg\gpg.exe --verify &lt;ASC file&gt;.asc
&lt;AOO file&gt;.exe</pre></li>
+  <li>When both checksums match it is indicated with an "Good signature from &lt;Person
who has created the signature&gt;
+  statement. <br /> Otherwise "BAD signature from ...".</li>
+</ul>
+<br />
+
+<p id="asc_linux"><b>This is how you verify with ASC and KEYS hashes on Linux</b></p>
+<br />
+
+<ul>
+  <li>Open a terminal and change to the directory with the downloaded AOO and ASC file.</li>
+  <li>Type in the following commands:</li>
+  <li><pre>cd &lt;path_to_AOO_and_ASC_file&gt;</pre></li>
+  <li><pre>wget https://people.apache.org/keys/group/openoffice.asc</pre></li>
+  <li><pre>gpg --import openoffice.asc</pre></li>
+  <li><pre>gpg --verify &lt;ASC file&gt;.asc &lt;AOO file&gt;.tar.gz</pre></li>
+  <li>When both checksums match it is indicated with an "Good signature from &lt;Person
who has created the signature&gt;
+  statement. <br /> Otherwise "BAD signature from ...".</li>
+</ul>
+<br />
+
+<p id="asc_macos"><b>This is how you verify with ASC and KEYS hashes on Mac OS</b></p>
+<br />
+
+<ul>
+  <li>A requirement is that you have installed <a href="http://www.gpgtools.org">GnuPG</a>.</li>
+  <li>Open a terminal (usually from here: "/Applications/Utilities").</li>
+  <li>Type in the following commands:</li>
+  <li><pre>cd &lt;path_to_AOO_and_ASC_file&gt;</pre></li>
+  <li><pre>curl https://people.apache.org/keys/group/openoffice.asc -o openoffice.asc</pre></li>
+  <li><pre>gpg --import openoffice.asc</pre></li>
+  <li><pre>gpg --verify &lt;ASC file&gt;.asc &lt;AOO file&gt;.dmg</pre></li>
+  <li>When both checksums match it is indicated with an "Good signature from &lt;Person
who has created the signature&gt;
+  statement. <br /> Otherwise "BAD signature from ...".</li>
+</ul>
+<br />
+
+<h4>Verify with MD5 hashes</h4>
+
+<p id="md5_win"><b>This is how you verify MD5 checksums on Windows</b></p>
+<br />
+
+<ul>
+  <li><a href="http://www.krylack.com/file-checksum-tool/" title="Download 'File
Checksum Tool' (by KRyLack Software)">
+  Download "File Checksum Tool" (by KRyLack Software)</a>. "File Checksum Tool" is
a graphical tool that is easy to use.
+  <a href="http://www.krylack.com/images/file-checksum-tool-screenshot.jpg" title="Screenshot
of 'File Checksum Tool'">
+  See here for a screenshot</a>.</li>
+  <li>Start the tool from where you have saved the downloaded file.</li>
+  <li>Section "1) File to Verify": Insert the path and filename of the downloaded AOO
file. The [Browse] button will
+  help to locate it with the Windows Explorer.</li>
+  <li>Section "2) Hashing Algorithm": Choose "MD5".</li>
+  <li>Section "3) File Checksum": Click on [Calculate Hash].</li>
+  <li>Section "4) Verify With": Paste the hash from the MD5 file you have downloaded.
First you have to open it and
+  copy the hash value.</li>
+  <li>Finally, click on [Compare].</li>
+  <li>When both hash values match a dialogbox shows "Checksums match". Otherwise "Checksums
do not match".</li>
+  <li>If the checksums do not match, please see the <a href="#checksums-notify"
+  title="What to do when the checksums do not match?">section below</a>.</li>
+</ul>
+<br />
+
+<p id="md5_linux"><b>This is how you verify MD5 checksums on Linux</b></p>
+<br />
+
+<ul>
+  <li>Open a terminal and change to the directory with the downloaded AOO and MD5 file.</li>
+  <li>Type in the following commands:</li>
+  <li><pre>cd &lt;path_to_AOO_and_MD5_file&gt;</pre></li>
+  <li><pre>md5sum -c &lt;AOO file&gt;.tar.gz.md5</pre></li>
+  <li>When both checksums match it is indicated with an "&lt;AOO file&gt;.tar.gz:
OK" statement.
+  <br />Otherwise "md5sum: WARNING: 1 of 1 computed checksum did NOT match".</li>
+  <li>If the checksums do not match, please see the <a href="#checksums-notify"
+  title="What to do when the checksums do not match?">section below</a>.</li>
+</ul>
+<br />
+
+<p id="md5_macos"><b>This is how you verify MD5 checksums on Mac OS</b></p>
+<br />
+
+<ul>
+  <li>Open a terminal (usually from here: "/Applications/Utilities").</li>
+  <li>Type in the following commands:</li>
+  <li><pre>cd &lt;path_to_AOO_and_MD5_file&gt;</pre></li>
+  <li><pre>openssl dgst -md5 &lt;AOO file&gt;.dmg</pre></li>
+  <li><pre>cat &lt;MD5 file&gt;.md5</pre></li>
+  <li>Now compare both MD5 checksums.</li>
+  <li>If the checksums do not match, please see the <a href="#checksums-notify"
+  title="What to do when the checksums do not match?">section below</a>.</li>
+</ul>
+<br />
+
+<p>For more information please refer to the more detailed description about <a href="../dev_docs/using_md5sums.html"
+title="How to use MD5 hashes">how to use MD5 hashes</a> on Windows, Linux and via
Firefox (for all platforms)..</p>
+<br />
+
+<h4>Verify with SHA256 hashes</h4>
+
+<p id="sha256_win"><b>This is how you verify SHA256 checksums on Windows</b></p>
+<br />
+
+<ul>
+  <li><a href="http://www.krylack.com/file-checksum-tool/" title="Download 'File
Checksum Tool' (by KRyLack Software)">
+  Download "File Checksum Tool" (by KRyLack Software)</a>. "File Checksum Tool" is
a graphical tool that is easy to use.
+  <a href="http://www.krylack.com/images/file-checksum-tool-screenshot.jpg" title="Screenshot
of 'File Checksum Tool'">
+  See here for a screenshot</a>.</li>
+  <li>Start the tool from where you have saved the downloaded file.</li>
+  <li>Section "1) File to Verify": Insert the path and filename of the downloaded AOO
file. The [Browse] button will
+  help to locate it with the Windows Explorer.</li>
+  <li>Section "2) Hashing Algorithm": Choose "SHA-256".</li>
+  <li>Section "3) File Checksum": Click on [Calculate Hash].</li>
+  <li>Section "4) Verify With": Paste the hash from the SHA256 file you have downloaded.
First you have to open it and
+  copy the hash value.</li>
+  <li>Finally, click on [Compare].</li>
+  <li>When both hash values match a dialogbox shows "Checksums match". Otherwise "Checksums
do not match".</li>
+  <li>If the checksums do not match, please see the <a href="#checksums-notify"
+  title="What to do when the checksums do not match?">section below</a>.</li>
+</ul>
+<br />
+
+<p id="sha256_linux"><b>This is how you verify SHA256 checksums on Linux</b></p>
+<br />
+
+<ul>
+  <li>Open a terminal, change to the directory with the downloaded AOO file and SHA256
file.</li>
+  <li>Type in the following commands:</li>
+  <li><pre>cd &lt;path_to_AOO_and_SHA256_file&gt;</pre></li>
+  <li><pre>sha256sum -c &lt;AOO file&gt;.tar.gz.sha256</pre></li>
+  <li>When both checksums match it is indicated with an "&lt;AOO file&gt;.tar.gz:
OK" statement.
+  <br />Otherwise "sha256sum: WARNING: 1 of 1 computed checksum did NOT match".</li>
+  <li>If the checksums do not match, please see the <a href="#checksums-notify"
+  title="What to do when the checksums do not match?">section below</a>.</li>
+</ul>
+<br />
+
+<p id="sha256_macos"><b>This is how you verify SHA256 checksums on Mac OS</b></p>
+<br />
+
+<ul>
+  <li>Open a terminal (usually from here: "/Applications/Utilities").</li>
+  <li>Type in the following commands:</li>
+  <li><pre>cd &lt;path_to_AOO_and_SHA256_file&gt;</pre></li>
+  <li><pre>openssl dgst -sha256 &lt;AOO file&gt;.dmg</pre></li>
+  <li><pre>cat &lt;SHA256 file&gt;.sha256</pre></li>
+  <li>Now compare both SHA256 checksums.</li>
+  <li>If the checksums do not match, please see the <a href="#checksums-notify"
+  title="What to do when the checksums do not match?">section below</a>.</li>
+</ul>
+<br />
+
+<h3 id="no_match">What to do when the checksums do not match?</h3>
+
+<ul>
+  <li>If the checksums do not match, your downloaded AOO file is broken. Please try
again a download to get a valid 
+  file.</li>
+  <li>If you are using a proxy server to get connected to the Internet try to disable
this if your Internet Service
+  Provider is allowing this. Or enable it if it is disabled at the moment. Please consult
the respective help topics for
+  the used Internet browser where to find this setting.</li>
+  <li>If you still get no matching checksum and you are sure it is not caused by an
error during downloading, please
+  inform the project. Make sure you have the following information at hand: exact file name
of the downloaded file and
+  checksum file, the processed checksum from your computer, have you used proxy server (yes/no)?,
if known from where the
+  files were downloaded.</li>
+  <li>With this information send a mail to us via the following ways:</li>
+  <li><a href="mailto:users%40openoffice.apache.org"
+  title="User's mailing list (to receive answers you need to be subscribed)">User's mailing
list</a>&nbsp;<b>*)</b></li>
+  <li><a href="http://user.services.openoffice.org" title="User forums (different
languages)">
+  User forums (different languages)</a></li>
+</ul>
+
+<p><b>*)</b> Be aware that all mails do not go to a single person but a
so-called mailing list. Mails will be archived and
+can be accessed also by other users. To receive answers, you will need to subscribe to the
mailing list before sending
+mails. For instructions, see: <a href="http://openoffice.apache.org/mailing-lists.html"
+title="Learn more about how to use mailing lists">Learn more about how to use mailing
lists</a>.</p>
+
+<p class="footer"><small><a href="#" title="Go to the start of the page">Start
of page</a></small></p>
+<br />
+
+<hr style="display: block;" />
+
+<h3 id="notes">Important Notes</h3>
+
+<h3>Report broken links</h3>
+
+<p>Please report any broken link or things you think that needs to be corrected on
this webpage by sending a mail to:
+<a href="mailto:dev@openoffice.apache.org&#63;subject=Possible%20broken%20link&#58;%203.4.1_checksums"
+title="Development mailing list (to receive answers you need to be subscribed)">
+Development mailing list</a>.&nbsp;<b>*)</b></p>
+
+<h3>Where to get help when I have a problem?</h3>
+
+<p>If you encounter problems with installation or using Apache OpenOffice, please contact
us via the following ways:</p>
+<ul>
+  <li><a href="mailto:users@openoffice.apache.org"
+  title="User's mailing list (to receive answers you need to be subscribed)">User's mailing
list</a>&nbsp;<b>*)</b></li>
+  <li><a href="http://forum.openoffice.org" title="User forums (different languages)">
+  User forums (different languages)</a></li>
+  <li><a href="http://www.oooforum.org" title="Another user forums">Another user
forums</a></li>
+</ul>
+<br />
+
+<p><b>*)</b> Be aware that all mails do not go to a single person but a
so-called mailing list. Mails will be archived and
+can be accessed also by other users. To receive answers, you will need to subscribe to the
mailing list before sending
+mails. For instructions, see: <a href="http://openoffice.apache.org/mailing-lists.html"
+title="Learn more about how to use mailing lists">Learn more about how to use mailing
lists</a>.</p>
+
+<p class="footer"><small><a href="#" title="Go to the start of the page">Start
of page</a></small></p>
+
+</body>
+</html>
+

Propchange: openoffice/ooo-site/trunk/content/download/checksums.html
------------------------------------------------------------------------------
    svn:eol-style = native



Mime
View raw message