Feature #2738 Provide Hash source installation

Having trouble installing or compiling FreeCAD? Get help here.
User avatar
Kunda1
Posts: 667
Joined: Thu Jan 05, 2017 9:03 pm

Feature #2738 Provide Hash source installation

Postby Kunda1 » Wed Jan 11, 2017 1:03 pm

In issue #2738 OP makes a good point:
Please, provide Hash information of the binaries in all versions and OS of FreeCAD on the download page product.
In deed, this information is important to be sure that integrity installation source is ok and can be trust.


is the team thinking about this?
I remember that sha256 is what homebrew uses (from my OSX days)
wmayer
Site Admin
Posts: 11342
Joined: Thu Feb 19, 2009 10:32 am

Re: Feature #2738 Provide Hash source installation

Postby wmayer » Wed Jan 11, 2017 1:08 pm

I think this is a point that becomes more and more important these days. Currently sgrogan does most of the work to upload installers and developer snapshots so it's best to assign it to him.
User avatar
sgrogan
Posts: 3050
Joined: Wed Oct 22, 2014 5:02 pm

Re: Feature #2738 Provide Hash source installation

Postby sgrogan » Wed Jan 11, 2017 1:09 pm

Kunda1 wrote:is the team thinking about this?

I have this on my list.
Current plan is provide the hash for future release assets and eventually to add it to the dailys in the Travis/Appveyor scripts.
It can be assigned to me.
EDIT: I see that wmayer and I are of the same mind.
User avatar
sgrogan
Posts: 3050
Joined: Wed Oct 22, 2014 5:02 pm

Re: Feature #2738 Provide Hash source installation

Postby sgrogan » Sat Mar 25, 2017 6:14 pm

With all the help with packaging lately, Thanks everyone :) , I think I have some time to address this.
I'm looking for opinions/suggestions how it should work.
User avatar
Kunda1
Posts: 667
Joined: Thu Jan 05, 2017 9:03 pm

Re: Feature #2738 Provide Hash source installation

Postby Kunda1 » Wed Mar 29, 2017 2:59 pm

What type of Hash should we use?
IIRC, I think Homebrew uses SHA256

Do we want to use GPG?
This would be a nice extra step.