Return-Path: X-Original-To: apmail-openoffice-commits-archive@www.apache.org Delivered-To: apmail-openoffice-commits-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id BE541100C3 for ; Mon, 29 Jul 2013 19:45:46 +0000 (UTC) Received: (qmail 89615 invoked by uid 500); 29 Jul 2013 19:45:46 -0000 Delivered-To: apmail-openoffice-commits-archive@openoffice.apache.org Received: (qmail 89586 invoked by uid 500); 29 Jul 2013 19:45:46 -0000 Mailing-List: contact commits-help@openoffice.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@openoffice.apache.org Delivered-To: mailing list commits@openoffice.apache.org Received: (qmail 89579 invoked by uid 99); 29 Jul 2013 19:45:46 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 29 Jul 2013 19:45:46 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=5.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [140.211.11.4] (HELO eris.apache.org) (140.211.11.4) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 29 Jul 2013 19:45:42 +0000 Received: from eris.apache.org (localhost [127.0.0.1]) by eris.apache.org (Postfix) with ESMTP id 3571A2388993; Mon, 29 Jul 2013 19:45:20 +0000 (UTC) Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: svn commit: r1508193 - /openoffice/ooo-site/trunk/content/download/checksums.html Date: Mon, 29 Jul 2013 19:45:20 -0000 To: commits@openoffice.apache.org From: marcus@apache.org X-Mailer: svnmailer-1.0.9 Message-Id: <20130729194520.3571A2388993@eris.apache.org> X-Virus-Checked: Checked by ClamAV on apache.org Author: marcus Date: Mon Jul 29 19:45:19 2013 New Revision: 1508193 URL: http://svn.apache.org/r1508193 Log: Created a webpage to describe how to verify downloads with checksums Added: openoffice/ooo-site/trunk/content/download/checksums.html (with props) Added: openoffice/ooo-site/trunk/content/download/checksums.html URL: http://svn.apache.org/viewvc/openoffice/ooo-site/trunk/content/download/checksums.html?rev=1508193&view=auto ============================================================================== --- openoffice/ooo-site/trunk/content/download/checksums.html (added) +++ openoffice/ooo-site/trunk/content/download/checksums.html Mon Jul 29 19:45:19 2013 @@ -0,0 +1,284 @@ + + + + + Apache OpenOffice - How to verify downloads with checksum files? + + + + + + + + +

Apache OpenOffice - How to verify downloads with checksum files?

+
+ +

+ Get the checksums for all Apache OpenOffice builds and files

ASC and KEYS - Windows
ASC and KEYS - Linux
ASC and KEYS - Mac OS
MD5 - Windows
MD5 - Linux
MD5 - Mac OS
SHA256 - Windows
SHA256 - Linux
SHA256 - Mac OS

+ What to do when the checksums do not match?

+ Important Notes

+
+ +

+ +

How to verify your download with ASC, MD5, SHA256 checksums?

+ +

A checksum and hash prcossed on the files that were downloaded is a way to make sure that the content is authentic and +was not manipulated by an unauthorized third party, and has not been damaged during the download process.

+
+ +

Verify with ASC and KEYS hashes

+ +

This is how you verify with ASC and KEYS hashes on Windows

+
+ +

+ Download and install "Gpg4win" (by Intevation GmbH, Germany). "Gpg4win" (full name is "GNU Privacy Guard for Windows") + is used to encrypt data.
For verifying the hashes you need the program "GnuPg". This is a tool that runs not in the graphical mode but in the + command prompt of Windows. Therefore you have to enter always the full path (default location after installation: + C:\Program Files\Gnu\GnuPg\gpg.exe) until you add it to the $PATH system environment + variable.
Save the following file with your Internet browser to the location where the downloaded AOO file is stored:

https://people.apache.org/keys/group/openoffice.asc

Open the start menu and enter cmd.exe into the search box.
Now change to the directory with the downloaded AOO and ASC file, import and verify with the following commands:
```
cd <path_to_AOO_and_ASC_file>
```

C:\Program Files\Gnu\GnuPg\gpg.exe --import openoffice.asc

C:\Program Files\Gnu\GnuPg\gpg.exe --verify <ASC file>.asc <AOO file>.exe

When both checksums match it is indicated with an "Good signature from <Person who has created the signature> + statement.
Otherwise "BAD signature from ...".

+
+ +

This is how you verify with ASC and KEYS hashes on Linux

+
+ +

Open a terminal and change to the directory with the downloaded AOO and ASC file.
Type in the following commands:
```
cd <path_to_AOO_and_ASC_file>
```

wget https://people.apache.org/keys/group/openoffice.asc

```
gpg --import openoffice.asc
```

gpg --verify <ASC file>.asc <AOO file>.tar.gz

When both checksums match it is indicated with an "Good signature from <Person who has created the signature> + statement.
Otherwise "BAD signature from ...".

+
+ +

This is how you verify with ASC and KEYS hashes on Mac OS

+
+ +

A requirement is that you have installed GnuPG.
Open a terminal (usually from here: "/Applications/Utilities").
Type in the following commands:
```
cd <path_to_AOO_and_ASC_file>
```

curl https://people.apache.org/keys/group/openoffice.asc -o openoffice.asc

```
gpg --import openoffice.asc
```

gpg --verify <ASC file>.asc <AOO file>.dmg

When both checksums match it is indicated with an "Good signature from <Person who has created the signature> + statement.
Otherwise "BAD signature from ...".

+
+ +

Verify with MD5 hashes

+ +

This is how you verify MD5 checksums on Windows

+
+ +

+ Download "File Checksum Tool" (by KRyLack Software). "File Checksum Tool" is a graphical tool that is easy to use. + + See here for a screenshot.
Start the tool from where you have saved the downloaded file.
Section "1) File to Verify": Insert the path and filename of the downloaded AOO file. The [Browse] button will + help to locate it with the Windows Explorer.
Section "2) Hashing Algorithm": Choose "MD5".
Section "3) File Checksum": Click on [Calculate Hash].
Section "4) Verify With": Paste the hash from the MD5 file you have downloaded. First you have to open it and + copy the hash value.
Finally, click on [Compare].
When both hash values match a dialogbox shows "Checksums match". Otherwise "Checksums do not match".
If the checksums do not match, please see the section below.

+
+ +

This is how you verify MD5 checksums on Linux

+
+ +

Open a terminal and change to the directory with the downloaded AOO and MD5 file.
Type in the following commands:
```
cd <path_to_AOO_and_MD5_file>
```
```
md5sum -c <AOO file>.tar.gz.md5
```
When both checksums match it is indicated with an "<AOO file>.tar.gz: OK" statement. +
Otherwise "md5sum: WARNING: 1 of 1 computed checksum did NOT match".
If the checksums do not match, please see the section below.

+
+ +

This is how you verify MD5 checksums on Mac OS

+
+ +

Open a terminal (usually from here: "/Applications/Utilities").
Type in the following commands:
```
cd <path_to_AOO_and_MD5_file>
```
```
openssl dgst -md5 <AOO file>.dmg
```
```
cat <MD5 file>.md5
```
Now compare both MD5 checksums.
If the checksums do not match, please see the section below.

+
+ +

For more information please refer to the more detailed description about how to use MD5 hashes on Windows, Linux and via Firefox (for all platforms)..

+
+ +

Verify with SHA256 hashes

+ +

This is how you verify SHA256 checksums on Windows

+
+ +

+ Download "File Checksum Tool" (by KRyLack Software). "File Checksum Tool" is a graphical tool that is easy to use. + + See here for a screenshot.
Start the tool from where you have saved the downloaded file.
Section "1) File to Verify": Insert the path and filename of the downloaded AOO file. The [Browse] button will + help to locate it with the Windows Explorer.
Section "2) Hashing Algorithm": Choose "SHA-256".
Section "3) File Checksum": Click on [Calculate Hash].
Section "4) Verify With": Paste the hash from the SHA256 file you have downloaded. First you have to open it and + copy the hash value.
Finally, click on [Compare].
When both hash values match a dialogbox shows "Checksums match". Otherwise "Checksums do not match".
If the checksums do not match, please see the section below.

+
+ +

This is how you verify SHA256 checksums on Linux

+
+ +

Open a terminal, change to the directory with the downloaded AOO file and SHA256 file.
Type in the following commands:
```
cd <path_to_AOO_and_SHA256_file>
```
```
sha256sum -c <AOO file>.tar.gz.sha256
```
When both checksums match it is indicated with an "<AOO file>.tar.gz: OK" statement. +
Otherwise "sha256sum: WARNING: 1 of 1 computed checksum did NOT match".
If the checksums do not match, please see the section below.

+
+ +

This is how you verify SHA256 checksums on Mac OS

+
+ +

Open a terminal (usually from here: "/Applications/Utilities").
Type in the following commands:
```
cd <path_to_AOO_and_SHA256_file>
```
```
openssl dgst -sha256 <AOO file>.dmg
```
```
cat <SHA256 file>.sha256
```
Now compare both SHA256 checksums.
If the checksums do not match, please see the section below.

+
+ +

What to do when the checksums do not match?

+ +

If the checksums do not match, your downloaded AOO file is broken. Please try again a download to get a valid + file.
If you are using a proxy server to get connected to the Internet try to disable this if your Internet Service + Provider is allowing this. Or enable it if it is disabled at the moment. Please consult the respective help topics for + the used Internet browser where to find this setting.
If you still get no matching checksum and you are sure it is not caused by an error during downloading, please + inform the project. Make sure you have the following information at hand: exact file name of the downloaded file and + checksum file, the processed checksum from your computer, have you used proxy server (yes/no)?, if known from where the + files were downloaded.
With this information send a mail to us via the following ways:
User's mailing list *)
+ User forums (different languages)

+ +

*) Be aware that all mails do not go to a single person but a so-called mailing list. Mails will be archived and +can be accessed also by other users. To receive answers, you will need to subscribe to the mailing list before sending +mails. For instructions, see: Learn more about how to use mailing lists.

+ + +
+ +

+ +

Important Notes

+ +

Report broken links

+ +

Please report any broken link or things you think that needs to be corrected on this webpage by sending a mail to: + +Development mailing list. *)

+ +

Where to get help when I have a problem?

+ +

If you encounter problems with installation or using Apache OpenOffice, please contact us via the following ways:

+
+ +

+ + + + + + Propchange: openoffice/ooo-site/trunk/content/download/checksums.html ------------------------------------------------------------------------------ svn:eol-style = native