sha512.sum not on mirrors

sha512.sum not on mirrors

[Brian Inglis]

Hi folks,

Mirrors I have checked are missing x86{,_64}/sha512.sum.
Is this no longer generated and uploaded to verify setup files are consistent?

-- 
Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: sha512.sum not on mirrors

[Steven Penny]

On Sat, 7 Oct 2017 11:02:35, Brian Inglis wrote:
> Mirrors I have checked are missing x86{,_64}/sha512.sum.
> Is this no longer generated and uploaded to verify setup files are consistent?

Nope, wrong:

    $ curl -I cygwin.mirror.constant.com/x86_64/sha512.sum
    HTTP/1.1 200 OK

    $ curl -I cygwin.mirrors.hoobly.com/x86_64/sha512.sum
    HTTP/1.1 200 OK

    $ curl -I cygwin.parentingamerica.com/x86_64/sha512.sum
    HTTP/1.1 200 OK

    $ curl -I mirror.rit.edu/cygwin/x86_64/sha512.sum
    HTTP/1.1 200 OK

    $ curl -I mirror.steadfast.net/cygwin/x86_64/sha512.sum
    HTTP/1.1 200 OK

    $ curl -I mirrors.netix.net/cygwin/x86_64/sha512.sum
    HTTP/1.1 200 OK

    $ curl -I mirrors.xmission.com/cygwin/x86_64/sha512.sum
    HTTP/1.1 200 OK

missing from this one, but I would say that is a mirror error:

    $ curl -I mirrors.sonic.net/cygwin/x86_64/sha512.sum
    HTTP/1.1 404 Not Found


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: sha512.sum not on mirrors

[Brian Inglis]

On 2017-10-07 11:28, Steven Penny wrote:
> On Sat, 7 Oct 2017 11:02:35, Brian Inglis wrote:
>> Mirrors I have checked are missing x86{,_64}/sha512.sum.
>> Is this no longer generated and uploaded to verify setup files are consistent?
> 
> Nope, wrong:
>    $ curl -I cygwin.mirror.constant.com/x86_64/sha512.sum
>    HTTP/1.1 200 OK
...
> missing from this one, but I would say that is a mirror error:
> 
>    $ curl -I mirrors.sonic.net/cygwin/x86_64/sha512.sum
>    HTTP/1.1 404 Not Found

Just checking, suspect it is an error, but Cygwin setup does not care, so it
could be a process change.
I use local public mirrors I have come across, that are not on the official
mirrors list, so are normally lightly loaded, compared to official mirrors which
are more remote and slower.
The sum files are also missing from an official mirror (still active in the
list) which may be their source.
I'll check again in a few hours to see if the sum files reappear.

-- 
Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: sha512.sum not on mirrors

[Achim Gratz]

Brian Inglis writes:
> Just checking, suspect it is an error, but Cygwin setup does not care, so it
> could be a process change.

The chain of trust for setup is via the signature on the setup.ini file
it uses and the SHA512 digests contained therein for each file that
setup might install.  I don't think setup ever looked at the sum files
in the directories.


Regards,
Achim.
-- 
+<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+

SD adaptation for Waldorf rackAttack V1.04R1:
http://Synth.Stromeko.net/Downloads.html#WaldorfSDada

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: sha512.sum not on mirrors

[Brian Inglis]

On 2017-10-07 12:07, Achim Gratz wrote:
> Brian Inglis writes:
>> Just checking, suspect it is an error, but Cygwin setup does not care, so it
>> could be a process change.
> 
> The chain of trust for setup is via the signature on the setup.ini file
> it uses and the SHA512 digests contained therein for each file that
> setup might install.  I don't think setup ever looked at the sum files
> in the directories.

The sum files reappeared after the next ~hourly refresh.

-- 
Take care. Thanks, Brian Inglis, Calgary, Alberta, Canada

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple