PM 25.3.2 x64 checksum and gpg sig

About this bulletin board and the Pale Moon website

Moderators: Lootyhoof, FranklinDM

Locked
dark_moon

PM 25.3.2 x64 checksum and gpg sig

Post by dark_moon » 2015-04-26, 09:18

I know the release was a fast release. Thank you for this fast update, Moonchild! Good work :thumbup:

Anyway i found on the website that the SHA1 checksum and the GPG signature didn't match with the x64 build.
I check the MD5+SHA1 checksum with fosshub and all looks good, but maybe you can fix this.

{{checksums removed since they are incorrect}}
Last edited by dark_moon on 2015-04-26, 14:01, edited 2 times in total.

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 29203
Joined: 2011-08-28, 17:27
Location: Tranås, SE
Contact:

Re: PM 25.3.2 x64 checksum and gpg sig

Post by Moonchild » 2015-04-26, 09:35

Yeah it was really rushed.
I'll get to double-checking and correcting checksums.

The PGP signatures should match though, I just double-checked.

EDIT: I just verified the checksums of the installer as well as the pgp signatures -- it all matches on the website with what I have locally.
"Son, in life you do not fight battles because you expect to win, you fight them merely because they need to be fought." -- Snagglepuss
Image

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 29203
Joined: 2011-08-28, 17:27
Location: Tranås, SE
Contact:

Re: PM 25.3.2 x64 checksum and gpg sig

Post by Moonchild » 2015-04-26, 09:46

I think I know what happened - I probably signed the installer twice and the different timestamp would cause a different checksum/pgp result.
I'll push the intended latest-signed binaries up to distribution asap.
"Son, in life you do not fight battles because you expect to win, you fight them merely because they need to be fought." -- Snagglepuss
Image

dark_moon

Re: PM 25.3.2 x64 checksum and gpg sig

Post by dark_moon » 2015-04-26, 09:51

Strange.
I download from PM mirror 1 & 2 and get the same checksum from fosshub but this didn't match with your checksum.
And i reload the PGP but no, error.

Edit: Oh okay.

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 29203
Joined: 2011-08-28, 17:27
Location: Tranås, SE
Contact:

Re: PM 25.3.2 x64 checksum and gpg sig

Post by Moonchild » 2015-04-26, 10:06

Correctly-signed binaries are now uploaded everywhere.
"Son, in life you do not fight battles because you expect to win, you fight them merely because they need to be fought." -- Snagglepuss
Image

dark_moon

Re: [solved] PM 25.3.2 x64 checksum and gpg sig

Post by dark_moon » 2015-04-26, 14:00

I get wrong SHA1 checksum.:
<palemoon-25.3.2.win64.installer.exe>
MD5 : E757BA3A84B06B0525589413A07FF4FA
SHA1 : 538758D7D81B8689E131690ED59D4BEC51CD5030

And PGP error too.

0x8FCF9CEC (3DAD 8CD1 0719 7488 D2A2 A0BD 4048 1E7B 8FCF 9CEC) is your PGP key, or?

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 29203
Joined: 2011-08-28, 17:27
Location: Tranås, SE
Contact:

Re: PM 25.3.2 x64 checksum and gpg sig

Post by Moonchild » 2015-04-28, 07:09

Checksum of the binary 64-bit installer (quadruple-checked) as offered for download:
e4f2fa1201ba266bb6c0c9287bf240cb9ba19a65

pgp signature errors should not occur (verified that as well, yet again) so if it mismatches, please re-download and re-check.
dark_moon wrote:0x8FCF9CEC (3DAD 8CD1 0719 7488 D2A2 A0BD 4048 1E7B 8FCF 9CEC) is your PGP key, or?
http://forum.palemoon.org/viewtopic.php?f=1&t=7176
"Son, in life you do not fight battles because you expect to win, you fight them merely because they need to be fought." -- Snagglepuss
Image

Locked