Hi,

> why. Check hashes and signatures - do you have some tool for this - hashes
> and signatures of what ?

I have some scripts set up, but its easy enough via the command line.

On OSX:
gpg --verify apache-flex-tour-de-flex-component-explorer-1.1-src.tar.gz.asc
gpg --verify apache-flex-tour-de-flex-component-explorer-1.1-src.zip.asc
md5 -q apache-flex-tour-de-flex-component-explorer-1.1-src.tar.gz > md5.txt
cmp ./apache-flex-tour-de-flex-component-explorer-1.1-src.tar.gz.md5 md5.txt 
md5 -q apache-flex-tour-de-flex-component-explorer-1.1-src.zip > md5.txt
cmp ./apache-flex-tour-de-flex-component-explorer-1.1-src.zip.md5 md5.txt 

Alex's ant script does something similar I assume.

Thanks,
Justin

Reply via email to