Instructions for testing the hash are in the release test page [1]. It is also documented in the install guide.
It is the way it is I believe because Chip took the release build script from CouchDB, as mentioned in the release build page. 1: https://cwiki.apache.org/confluence/display/CLOUDSTACK/Release+test+procedure On Oct 24, 2013, at 12:53 AM, Darren Shepherd <darren.s.sheph...@gmail.com<mailto:darren.s.sheph...@gmail.com>> wrote: But how does one validate it? I just wrote a dumb script to concatenation, remove whitespace, lowercase and then pass to "sha512sum -c." I've never seen anyone provide SHAs in that format. I wouldn't expect many people to know how to use them. Why can't we use the good old GNU coreutils style? Darren On Wed, Oct 23, 2013 at 7:14 PM, John Kinsella <j...@stratosec.co<mailto:j...@stratosec.co>> wrote: This is the output of gpg -v --print-md SHA512, generated as part of the release procedure [1] by tools/build/build_asf.sh 1: https://cwiki.apache.org/confluence/display/CLOUDSTACK/Release+Procedure On Oct 17, 2013, at 7:56 PM, Darren Shepherd <darren.s.sheph...@gmail.com<mailto:darren.s.sheph...@gmail.com>> wrote: The hashes that are on c.a.o for the releases have a format like http://www.apache.org/dist/cloudstack/releases/4.2.0/apache-cloudstack-4.2.0-src.tar.bz2.sha apache-cloudstack-4.2.0-src.tar.bz2: CC487DF3 7E7B6800 F9DC05A3 5B72DEFD 684E0094 F1666F57 5D694916 CF74ED98 9D7CDF35 4021D3C5 8BFD4BB9 39AB02CD EA82D42C 78880EDB 04F2532A 61376537 I've never seen this. Is this some hip new format I'm not aware of, and I'm the uncool kid still using GNU coreutils? Darren Stratosec<http://stratosec.co/> - Compliance as a Service o: 415.315.9385 @johnlkinsella<http://twitter.com/johnlkinsella>