You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@openoffice.apache.org by ma...@apache.org on 2012/10/14 16:31:10 UTC

svn commit: r1398091 - in /incubator/ooo/ooo-site/trunk/content/download/checksums: 3.4.0_checksums.html 3.4.1_checksums.html

Author: marcus
Date: Sun Oct 14 14:31:10 2012
New Revision: 1398091

URL: http://svn.apache.org/viewvc?rev=1398091&view=rev
Log:
Add ASC verification instructions for Windows

Modified:
    incubator/ooo/ooo-site/trunk/content/download/checksums/3.4.0_checksums.html
    incubator/ooo/ooo-site/trunk/content/download/checksums/3.4.1_checksums.html

Modified: incubator/ooo/ooo-site/trunk/content/download/checksums/3.4.0_checksums.html
URL: http://svn.apache.org/viewvc/incubator/ooo/ooo-site/trunk/content/download/checksums/3.4.0_checksums.html?rev=1398091&r1=1398090&r2=1398091&view=diff
==============================================================================
--- incubator/ooo/ooo-site/trunk/content/download/checksums/3.4.0_checksums.html (original)
+++ incubator/ooo/ooo-site/trunk/content/download/checksums/3.4.0_checksums.html Sun Oct 14 14:31:10 2012
@@ -1022,7 +1022,22 @@ was not manipulated by an unauthorized t
 <br />
 
 <ul>
-  <li>to be defined</li>
+  <li><a href="http://gpg4win.org/download.html" title="Download 'Gpg4win' (by Intevation GmbH, Germany)">
+      Download and install "Gpg4win" (by Intevation GmbH, Germany)</a>. "Gpg4win" (full name is "GNU Privacy Guard for
+      Windows") is used to encrypt data.</li>
+  <li>For verifying the hashes you need the program "GnuPg". This is a tool that runs not in the graphical mode but in the
+      command prompt of Windows. Therefore you have to enter always the full path (default location after installation:
+      <code>C:\Program Files\Gnu\GnuPg\gpg.exe</code>) until you add it to the <code>$PATH</code> system environment
+      variable.</li>
+  <li>Save the following file with your Internet browser to the location where the downloaded AOO file is stored:</li>
+  <li><pre>https://people.apache.org/keys/group/ooo.asc</pre></li>
+  <li>Open the start menu and enter <code>cmd.exe</code> into the search box.</li>
+  <li>Now change to the directory with the downloaded AOO and ASC file, import and verify with the following commands:</li>
+  <li><pre>cd &lt;path_to_AOO_and_ASC_file&gt;</pre></li>
+  <li><pre>C:\Program Files\Gnu\GnuPg\gpg.exe --import ooo.asc</pre></li>
+  <li><pre>C:\Program Files\Gnu\GnuPg\gpg.exe --verify &lt;ASC file&gt;.asc &lt;AOO file&gt;.exe</pre></li>
+  <li>When both checksums match it is indicated with an "Good signature from &lt;Person who has created the signature&gt;
+      statement. <br /> Otherwise "BAD signature from ...".</li>
 </ul>
 <br />
 
@@ -1035,7 +1050,7 @@ was not manipulated by an unauthorized t
   <li><pre>cd &lt;path_to_AOO_and_ASC_file&gt;</pre></li>
   <li><pre>wget https://people.apache.org/keys/group/ooo.asc</pre></li>
   <li><pre>gpg --import ooo.asc</pre></li>
-  <li><pre>gpg --verify &lt;downloaded AOO file&gt;.tar.gz.asc &lt;downloaded AOO file&gt;.tar.gz</pre></li>
+  <li><pre>gpg --verify &lt;ASC file&gt;.asc &lt;AOO file&gt;.tar.gz</pre></li>
   <li>When both checksums match it is indicated with an "Good signature from &lt;Person who has created the signature&gt;
       statement. <br /> Otherwise "BAD signature from ...".</li>
 </ul>
@@ -1051,7 +1066,7 @@ was not manipulated by an unauthorized t
   <li><pre>cd &lt;path_to_AOO_and_ASC_file&gt;</pre></li>
   <li><pre>curl https://people.apache.org/keys/group/ooo.asc -o ooo.asc</pre></li>
   <li><pre>gpg --import ooo.asc</pre></li>
-  <li><pre>gpg --verify &lt;downloaded AOO file&gt;.dmg.asc &lt;downloaded AOO file&gt;.dmg</pre></li>
+  <li><pre>gpg --verify &lt;ASC file&gt;.asc &lt;AOO file&gt;.dmg</pre></li>
   <li>When both checksums match it is indicated with an "Good signature from &lt;Person who has created the signature&gt;
       statement. <br /> Otherwise "BAD signature from ...".</li>
 </ul>
@@ -1088,8 +1103,8 @@ was not manipulated by an unauthorized t
   <li>Open a terminal and change to the directory with the downloaded AOO and MD5 file.</li>
   <li>Type in the following commands:</li>
   <li><pre>cd &lt;path_to_AOO_and_MD5_file&gt;</pre></li>
-  <li><pre>md5sum -c &lt;downloaded AOO file&gt;.tar.gz.md5</pre></li>
-  <li>When both checksums match it is indicated with an "&lt;downloaded AOO file&gt;.tar.gz: OK" statement. <br />
+  <li><pre>md5sum -c &lt;AOO file&gt;.tar.gz.md5</pre></li>
+  <li>When both checksums match it is indicated with an "&lt;AOO file&gt;.tar.gz: OK" statement. <br />
       Otherwise "md5sum: WARNING: 1 of 1 computed checksum did NOT match".</li>
   <li>If the checksums do not match, please see the <a href="#checksums-notify"
   title="What to do when the checksums do not match?">section below</a>.</li>
@@ -1103,8 +1118,8 @@ was not manipulated by an unauthorized t
   <li>Open a terminal (usually from here: "/Applications/Utilities").</li>
   <li>Type in the following commands:</li>
   <li><pre>cd &lt;path_to_AOO_and_MD5_file&gt;</pre></li>
-  <li><pre>openssl dgst -md5 &lt;downloaded AOO file&gt;.dmg</pre></li>
-  <li><pre>cat &lt;downloaded MD5 file&gt;.md5</pre></li>
+  <li><pre>openssl dgst -md5 &lt;AOO file&gt;.dmg</pre></li>
+  <li><pre>cat &lt;MD5 file&gt;.md5</pre></li>
   <li>Now compare both MD5 checksums.</li>
   <li>If the checksums do not match, please see the <a href="#checksums-notify"
   title="What to do when the checksums do not match?">section below</a>.</li>
@@ -1146,8 +1161,8 @@ title="How to use MD5 hashes">how to use
   <li>Open a terminal, change to the directory with the downloaded AOO file and SHA1 file.</li>
   <li>Type in the following commands:</li>
   <li><pre>cd &lt;path_to_AOO_and_SHA1_file&gt;</pre></li>
-  <li><pre>sha1sum -c &lt;downloaded AOO file&gt;.tar.gz.sha1</pre></li>
-  <li>When both checksums match it is indicated with an "&lt;downloaded AOO file&gt;.tar.gz: OK" statement. <br />
+  <li><pre>sha1sum -c &lt;AOO file&gt;.tar.gz.sha1</pre></li>
+  <li>When both checksums match it is indicated with an "&lt;AOO file&gt;.tar.gz: OK" statement. <br />
       Otherwise "sha1sum: WARNING: 1 of 1 computed checksum did NOT match".</li>
   <li>If the checksums do not match, please see the <a href="#checksums-notify"
   title="What to do when the checksums do not match?">section below</a>.</li>
@@ -1161,8 +1176,8 @@ title="How to use MD5 hashes">how to use
   <li>Open a terminal (usually from here: "/Applications/Utilities").</li>
   <li>Type in the following commands:</li>
   <li><pre>cd &lt;path_to_AOO_and_SHA1_file&gt;</pre></li>
-  <li><pre>openssl dgst -sha1 &lt;downloaded AOO file&gt;.dmg</pre></li>
-  <li><pre>cat &lt;downloaded SHA1 file&gt;.sha1</pre></li>
+  <li><pre>openssl dgst -sha1 &lt;AOO file&gt;.dmg</pre></li>
+  <li><pre>cat &lt;SHA1 file&gt;.dmg.sha1</pre></li>
   <li>Now compare both SHA1 checksums.</li>
   <li>If the checksums do not match, please see the <a href="#checksums-notify"
   title="What to do when the checksums do not match?">section below</a>.</li>
@@ -1200,8 +1215,8 @@ title="How to use MD5 hashes">how to use
   <li>Open a terminal, change to the directory with the downloaded AOO file and SHA512 file.</li>
   <li>Type in the following commands:</li>
   <li><pre>cd &lt;path_to_AOO_and_SHA512_file&gt;</pre></li>
-  <li><pre>sha512sum -c &lt;downloaded AOO file&gt;.tar.gz.sha512</pre></li>
-  <li>When both checksums match it is indicated with an "&lt;downloaded AOO file&gt;.tar.gz: OK" statement. <br />
+  <li><pre>sha512sum -c &lt;SHA512 file&gt;.tar.gz.sha512</pre></li>
+  <li>When both checksums match it is indicated with an "&lt;AOO file&gt;.tar.gz: OK" statement. <br />
       Otherwise "sha512sum: WARNING: 1 of 1 computed checksum did NOT match".</li>
   <li>If the checksums do not match, please see the <a href="#checksums-notify"
   title="What to do when the checksums do not match?">section below</a>.</li>
@@ -1215,8 +1230,8 @@ title="How to use MD5 hashes">how to use
   <li>Open a terminal (usually from here: "/Applications/Utilities").</li>
   <li>Type in the following commands:</li>
   <li><pre>cd &lt;path_to_AOO_and_SHA512_file&gt;</pre></li>
-  <li><pre>openssl dgst -sha512 &lt;downloaded AOO file&gt;.dmg</pre></li>
-  <li><pre>cat &lt;downloaded SHA512 file&gt;.sha512</pre></li>
+  <li><pre>openssl dgst -sha512 &lt;AOO file&gt;.dmg</pre></li>
+  <li><pre>cat &lt;SHA512 file&gt;.dmg.sha512</pre></li>
   <li>Now compare both SHA512 checksums.</li>
   <li>If the checksums do not match, please see the <a href="#checksums-notify"
   title="What to do when the checksums do not match?">section below</a>.</li>

Modified: incubator/ooo/ooo-site/trunk/content/download/checksums/3.4.1_checksums.html
URL: http://svn.apache.org/viewvc/incubator/ooo/ooo-site/trunk/content/download/checksums/3.4.1_checksums.html?rev=1398091&r1=1398090&r2=1398091&view=diff
==============================================================================
--- incubator/ooo/ooo-site/trunk/content/download/checksums/3.4.1_checksums.html (original)
+++ incubator/ooo/ooo-site/trunk/content/download/checksums/3.4.1_checksums.html Sun Oct 14 14:31:10 2012
@@ -833,7 +833,22 @@ was not manipulated by an unauthorized t
 <br />
 
 <ul>
-  <li>to be defined</li>
+  <li><a href="http://gpg4win.org/download.html" title="Download 'Gpg4win' (by Intevation GmbH, Germany)">
+      Download and install "Gpg4win" (by Intevation GmbH, Germany)</a>. "Gpg4win" (full name is "GNU Privacy Guard for
+      Windows") is used to encrypt data.</li>
+  <li>For verifying the hashes you need the program "GnuPg". This is a tool that runs not in the graphical mode but in the
+      command prompt of Windows. Therefore you have to enter always the full path (default location after installation:
+      <code>C:\Program Files\Gnu\GnuPg\gpg.exe</code>) until you add it to the <code>$PATH</code> system environment
+      variable.</li>
+  <li>Save the following file with your Internet browser to the location where the downloaded AOO file is stored:</li>
+  <li><pre>https://people.apache.org/keys/group/ooo.asc</pre></li>
+  <li>Open the start menu and enter <code>cmd.exe</code> into the search box.</li>
+  <li>Now change to the directory with the downloaded AOO and ASC file, import and verify with the following commands:</li>
+  <li><pre>cd &lt;path_to_AOO_and_ASC_file&gt;</pre></li>
+  <li><pre>C:\Program Files\Gnu\GnuPg\gpg.exe --import ooo.asc</pre></li>
+  <li><pre>C:\Program Files\Gnu\GnuPg\gpg.exe --verify &lt;ASC file&gt;.asc &lt;AOO file&gt;.exe</pre></li>
+  <li>When both checksums match it is indicated with an "Good signature from &lt;Person who has created the signature&gt;
+      statement. <br /> Otherwise "BAD signature from ...".</li>
 </ul>
 <br />
 
@@ -846,7 +861,7 @@ was not manipulated by an unauthorized t
   <li><pre>cd &lt;path_to_AOO_and_ASC_file&gt;</pre></li>
   <li><pre>wget https://people.apache.org/keys/group/ooo.asc</pre></li>
   <li><pre>gpg --import ooo.asc</pre></li>
-  <li><pre>gpg --verify &lt;downloaded AOO file&gt;.tar.gz.asc &lt;downloaded AOO file&gt;.tar.gz</pre></li>
+  <li><pre>gpg --verify &lt;ASC file&gt;.asc &lt;AOO file&gt;.tar.gz</pre></li>
   <li>When both checksums match it is indicated with an "Good signature from &lt;Person who has created the signature&gt;
       statement. <br /> Otherwise "BAD signature from ...".</li>
 </ul>
@@ -862,7 +877,7 @@ was not manipulated by an unauthorized t
   <li><pre>cd &lt;path_to_AOO_and_ASC_file&gt;</pre></li>
   <li><pre>curl https://people.apache.org/keys/group/ooo.asc -o ooo.asc</pre></li>
   <li><pre>gpg --import ooo.asc</pre></li>
-  <li><pre>gpg --verify &lt;downloaded AOO file&gt;.dmg.asc &lt;downloaded AOO file&gt;.dmg</pre></li>
+  <li><pre>gpg --verify &lt;ASC file&gt;.asc &lt;AOO file&gt;.dmg</pre></li>
   <li>When both checksums match it is indicated with an "Good signature from &lt;Person who has created the signature&gt;
       statement. <br /> Otherwise "BAD signature from ...".</li>
 </ul>
@@ -899,8 +914,8 @@ was not manipulated by an unauthorized t
   <li>Open a terminal and change to the directory with the downloaded AOO and MD5 file.</li>
   <li>Type in the following commands:</li>
   <li><pre>cd &lt;path_to_AOO_and_MD5_file&gt;</pre></li>
-  <li><pre>md5sum -c &lt;downloaded AOO file&gt;.tar.gz.md5</pre></li>
-  <li>When both checksums match it is indicated with an "&lt;downloaded AOO file&gt;.tar.gz: OK" statement. <br />
+  <li><pre>md5sum -c &lt;AOO file&gt;.tar.gz.md5</pre></li>
+  <li>When both checksums match it is indicated with an "&lt;AOO file&gt;.tar.gz: OK" statement. <br />
       Otherwise "md5sum: WARNING: 1 of 1 computed checksum did NOT match".</li>
   <li>If the checksums do not match, please see the <a href="#checksums-notify"
   title="What to do when the checksums do not match?">section below</a>.</li>
@@ -914,8 +929,8 @@ was not manipulated by an unauthorized t
   <li>Open a terminal (usually from here: "/Applications/Utilities").</li>
   <li>Type in the following commands:</li>
   <li><pre>cd &lt;path_to_AOO_and_MD5_file&gt;</pre></li>
-  <li><pre>openssl dgst -md5 &lt;downloaded AOO file&gt;.dmg</pre></li>
-  <li><pre>cat &lt;downloaded MD5 file&gt;.md5</pre></li>
+  <li><pre>openssl dgst -md5 &lt;AOO file&gt;.dmg</pre></li>
+  <li><pre>cat &lt;MD5 file&gt;.md5</pre></li>
   <li>Now compare both MD5 checksums.</li>
   <li>If the checksums do not match, please see the <a href="#checksums-notify"
   title="What to do when the checksums do not match?">section below</a>.</li>
@@ -957,8 +972,8 @@ title="How to use MD5 hashes">how to use
   <li>Open a terminal, change to the directory with the downloaded AOO file and SHA256 file.</li>
   <li>Type in the following commands:</li>
   <li><pre>cd &lt;path_to_AOO_and_SHA256_file&gt;</pre></li>
-  <li><pre>sha256sum -c &lt;downloaded AOO file&gt;.tar.gz.sha256</pre></li>
-  <li>When both checksums match it is indicated with an "&lt;downloaded AOO file&gt;.tar.gz: OK" statement. <br />
+  <li><pre>sha256sum -c &lt;AOO file&gt;.tar.gz.sha256</pre></li>
+  <li>When both checksums match it is indicated with an "&lt;AOO file&gt;.tar.gz: OK" statement. <br />
       Otherwise "sha256sum: WARNING: 1 of 1 computed checksum did NOT match".</li>
   <li>If the checksums do not match, please see the <a href="#checksums-notify"
   title="What to do when the checksums do not match?">section below</a>.</li>
@@ -972,8 +987,8 @@ title="How to use MD5 hashes">how to use
   <li>Open a terminal (usually from here: "/Applications/Utilities").</li>
   <li>Type in the following commands:</li>
   <li><pre>cd &lt;path_to_AOO_and_SHA256_file&gt;</pre></li>
-  <li><pre>openssl dgst -sha256 &lt;downloaded AOO file&gt;.dmg</pre></li>
-  <li><pre>cat &lt;downloaded SHA256 file&gt;.sha256</pre></li>
+  <li><pre>openssl dgst -sha256 &lt;AOO file&gt;.dmg</pre></li>
+  <li><pre>cat &lt;SHA256 file&gt;.sha256</pre></li>
   <li>Now compare both SHA256 checksums.</li>
   <li>If the checksums do not match, please see the <a href="#checksums-notify"
   title="What to do when the checksums do not match?">section below</a>.</li>