You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Varuna Seneviratna <va...@gmail.com> on 2007/07/26 19:10:35 UTC
How to do this
Can somebody tell me How to do what is described below
you *must* verify the integrity of the downloaded files. We
provide PGP signatures for every release file. This signature should be
matched against the KEYS
<http://www.apache.org/dist/tomcat/tomcat-5/KEYS>file which contains
the PGP keys of Tomcat's Release Managers. We also
provide an MD5 checksum for every release file. After you download the file,
you should calculate a checksum for your download, and make sure it is the
same as ours.
--
Varuna Seneviratna
No 514 Udumulla Road
Battaramulla
Sri Lanka
Tel : 011-2888620
Re: How to do this
Posted by Martin Gainty <mg...@hotmail.com>.
Varuna-
Your analysis that the poster is angry needs to be adjusted
What Gregor is speaking of is that many of us on this list provide advice
for free
Those of us (who are not independently wealthy) have an immediate need to
find a way to acquire compensation for working proposals
Since free advice does not either pay bills or buy food then employing the
algorithm Free first time...next time an Invoice
seems like a more than fair compensation algorithm
Martin--
This email message and any files transmitted with it contain confidential
information intended only for the person(s) to whom this email message is
addressed. If you have received this email message in error, please notify
the sender immediately by telephone or email and destroy the original
message without making a copy. Thank you.
----- Original Message -----
From: "Varuna Seneviratna" <vs...@gmail.com>
To: "Tomcat Users List" <us...@tomcat.apache.org>
Sent: Monday, July 30, 2007 2:01 PM
Subject: Re: How to do this
> Thank you very much Gregor for your anger wrapped help
> with all the RESPECT Varuna
>
> On 7/27/07, Gregor Schneider <rc...@googlemail.com> wrote:
>>
>> ok, this information is for free, the next one you'll have to pay me for:
>>
>> they keys of software.distributions are check-sums over the
>> program-archives (like zip, tgz etc.).
>>
>> those check-sums usually are calculated using a program like pgp
>> (pretty good privacy) or the free version from the
>> gnu-software-foundation (gpg - that was the link i posted recently).
>>
>> so what you have to do is to install gpg or pgp first.
>>
>> having installed one of those programs and once knowing your ways
>> around there, you should be able to understand the usage of those keys
>> (checksums) that are used in apache software-distributions and many
>> more products.
>>
>> btw., you do not necessarily have to check those tomcat-archives -
>> only, if you're paranoid or if you want to setup a
>> production-server...
>>
>> what i really dislike is somebody like you giving the list 2 miserable
>> words "please help", then asking the list for a
>> step-by-step-instruction.
>>
>> you should at least show some effort to sort out things yourself first!
>>
>> ppl in this list are busy earning their dollars / euros, and when they
>> help you, they offer time and effort to do so.
>>
>> therefore, show at least some RESPECT and try to solve the problem
>> yourself. If you're in a deadend, ppl here will be happy to help you.
>>
>> Therefore, may last tip for you:
>>
>> - If you just want to play around with Tomcat:
>> download it, forget about the keys and be happy
>>
>> - If you're a stud and your prof asked you to verify the download,
>> either go to the link I've posted above, read about
>> public/private-key-principles, download gpg and try to understand the
>> software. If you don't understand anything about public/private-keys,
>> let your prof know.
>>
>> - if this is a requirement from a customer: simply tell your customer
>> that you don't know nothing about the basics of informatics and let
>> him know to better get someone else for the job
>>
>> Gregor
>> --
>> what's puzzlin' you, is the nature of my game
>> gpgp-fp: 79A84FA526807026795E4209D3B3FE028B3170B2
>> gpgp-key available @ http://pgpkeys.pca.dfn.de:11371
>>
>> ---------------------------------------------------------------------
>> To start a new topic, e-mail: users@tomcat.apache.org
>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> For additional commands, e-mail: users-help@tomcat.apache.org
>>
>>
>
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: How to do this
Posted by Varuna Seneviratna <vs...@gmail.com>.
Thank you very much Gregor for your anger wrapped help
with all the RESPECT Varuna
On 7/27/07, Gregor Schneider <rc...@googlemail.com> wrote:
>
> ok, this information is for free, the next one you'll have to pay me for:
>
> they keys of software.distributions are check-sums over the
> program-archives (like zip, tgz etc.).
>
> those check-sums usually are calculated using a program like pgp
> (pretty good privacy) or the free version from the
> gnu-software-foundation (gpg - that was the link i posted recently).
>
> so what you have to do is to install gpg or pgp first.
>
> having installed one of those programs and once knowing your ways
> around there, you should be able to understand the usage of those keys
> (checksums) that are used in apache software-distributions and many
> more products.
>
> btw., you do not necessarily have to check those tomcat-archives -
> only, if you're paranoid or if you want to setup a
> production-server...
>
> what i really dislike is somebody like you giving the list 2 miserable
> words "please help", then asking the list for a
> step-by-step-instruction.
>
> you should at least show some effort to sort out things yourself first!
>
> ppl in this list are busy earning their dollars / euros, and when they
> help you, they offer time and effort to do so.
>
> therefore, show at least some RESPECT and try to solve the problem
> yourself. If you're in a deadend, ppl here will be happy to help you.
>
> Therefore, may last tip for you:
>
> - If you just want to play around with Tomcat:
> download it, forget about the keys and be happy
>
> - If you're a stud and your prof asked you to verify the download,
> either go to the link I've posted above, read about
> public/private-key-principles, download gpg and try to understand the
> software. If you don't understand anything about public/private-keys,
> let your prof know.
>
> - if this is a requirement from a customer: simply tell your customer
> that you don't know nothing about the basics of informatics and let
> him know to better get someone else for the job
>
> Gregor
> --
> what's puzzlin' you, is the nature of my game
> gpgp-fp: 79A84FA526807026795E4209D3B3FE028B3170B2
> gpgp-key available @ http://pgpkeys.pca.dfn.de:11371
>
> ---------------------------------------------------------------------
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
Re: How to do this
Posted by Gregor Schneider <rc...@googlemail.com>.
ok, this information is for free, the next one you'll have to pay me for:
they keys of software.distributions are check-sums over the
program-archives (like zip, tgz etc.).
those check-sums usually are calculated using a program like pgp
(pretty good privacy) or the free version from the
gnu-software-foundation (gpg - that was the link i posted recently).
so what you have to do is to install gpg or pgp first.
having installed one of those programs and once knowing your ways
around there, you should be able to understand the usage of those keys
(checksums) that are used in apache software-distributions and many
more products.
btw., you do not necessarily have to check those tomcat-archives -
only, if you're paranoid or if you want to setup a
production-server...
what i really dislike is somebody like you giving the list 2 miserable
words "please help", then asking the list for a
step-by-step-instruction.
you should at least show some effort to sort out things yourself first!
ppl in this list are busy earning their dollars / euros, and when they
help you, they offer time and effort to do so.
therefore, show at least some RESPECT and try to solve the problem
yourself. If you're in a deadend, ppl here will be happy to help you.
Therefore, may last tip for you:
- If you just want to play around with Tomcat:
download it, forget about the keys and be happy
- If you're a stud and your prof asked you to verify the download,
either go to the link I've posted above, read about
public/private-key-principles, download gpg and try to understand the
software. If you don't understand anything about public/private-keys,
let your prof know.
- if this is a requirement from a customer: simply tell your customer
that you don't know nothing about the basics of informatics and let
him know to better get someone else for the job
Gregor
--
what's puzzlin' you, is the nature of my game
gpgp-fp: 79A84FA526807026795E4209D3B3FE028B3170B2
gpgp-key available @ http://pgpkeys.pca.dfn.de:11371
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: How to do this
Posted by Varuna Seneviratna <va...@gmail.com>.
Hi would you please elaborate on this I can't understand anything of this
verifying process please explain from the tiniest detail to the end
including how this verification helps to ensure the integrity of the
downloaded files and also what is the logic behind this method of
verification which makes it posible to use as a means of verifying the
integrity
On 7/27/07, Varuna Seneviratna <va...@gmail.com> wrote:
>
>
>
> On 7/27/07, Varuna Seneviratna <va...@gmail.com> wrote:
> >
> > Hi Greger would you please elaborate on this I can't understand anything
> > of this verifying process please explain from the tiniest detail to the end
> > including how this verification helps to ensure the integrity of the
> > downloaded files and also what is the logic behind this method of
> > verification which makes it posible to use as a means of verifying the
> > integrity
> > Thanks Varuna
> >
> >
> > On 7/27/07, Gregor Schneider < rc46fi@googlemail.com> wrote:
> > >
> > > http://www.gnupg.org/
> > > --
> > > what's puzzlin' you, is the nature of my game
> > > gpgp-fp: 79A84FA526807026795E4209D3B3FE028B3170B2
> > > gpgp-key available @ http://pgpkeys.pca.dfn.de:11371
> > >
> > > ---------------------------------------------------------------------
> > > To start a new topic, e-mail: users@tomcat.apache.org
> > > To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> > > For additional commands, e-mail: users-help@tomcat.apache.org
> > >
> > >
> >
> >
> > --
> > Varuna Seneviratna
> > No 514 Udumulla Road
> > Battaramulla
> > Sri Lanka
> > Tel : 011-2888620
> >
>
>
>
> --
> Varuna Seneviratna
> No 514 Udumulla Road
> Battaramulla
> Sri Lanka
> Tel : 011-2888620
>
--
Varuna Seneviratna
No 514 Udumulla Road
Battaramulla
Sri Lanka
Tel : 011-2888620
Re: How to do this
Posted by Varuna Seneviratna <va...@gmail.com>.
On 7/27/07, Varuna Seneviratna <va...@gmail.com> wrote:
>
> Hi Greger would you please elaborate on this I can't understand anything
> of this verifying process please explain from the tiniest detail to the end
> including how this verification helps to ensure the integrity of the
> downloaded files and also what is the logic behind this method of
> verification which makes it posible to use as a means of verifying the
> integrity
> Thanks Varuna
>
>
> On 7/27/07, Gregor Schneider <rc...@googlemail.com> wrote:
> >
> > http://www.gnupg.org/
> > --
> > what's puzzlin' you, is the nature of my game
> > gpgp-fp: 79A84FA526807026795E4209D3B3FE028B3170B2
> > gpgp-key available @ http://pgpkeys.pca.dfn.de:11371
> >
> > ---------------------------------------------------------------------
> > To start a new topic, e-mail: users@tomcat.apache.org
> > To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> > For additional commands, e-mail: users-help@tomcat.apache.org
> >
> >
>
>
> --
> Varuna Seneviratna
> No 514 Udumulla Road
> Battaramulla
> Sri Lanka
> Tel : 011-2888620
>
--
Varuna Seneviratna
No 514 Udumulla Road
Battaramulla
Sri Lanka
Tel : 011-2888620
Re: How to do this
Posted by Varuna Seneviratna <va...@gmail.com>.
Hi Greger would you please elaborate on this I can't understand anything of
this verifying process please explain from the tiniest detail to the end
including how this verification helps to ensure the integrity of the
downloaded files and also what is the logic behind this method of
verification which makes it posible to use as a means of verifying the
integrity
Thanks Varuna
On 7/27/07, Gregor Schneider <rc...@googlemail.com> wrote:
>
> http://www.gnupg.org/
> --
> what's puzzlin' you, is the nature of my game
> gpgp-fp: 79A84FA526807026795E4209D3B3FE028B3170B2
> gpgp-key available @ http://pgpkeys.pca.dfn.de:11371
>
> ---------------------------------------------------------------------
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
--
Varuna Seneviratna
No 514 Udumulla Road
Battaramulla
Sri Lanka
Tel : 011-2888620
Re: How to do this
Posted by Gregor Schneider <rc...@googlemail.com>.
http://www.gnupg.org/
--
what's puzzlin' you, is the nature of my game
gpgp-fp: 79A84FA526807026795E4209D3B3FE028B3170B2
gpgp-key available @ http://pgpkeys.pca.dfn.de:11371
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org