On Fri, Jul 12, 2013 at 12:48 PM, Rob Weir <robw...@apache.org> wrote: > Does anyone have a script to verify signatures and hashes for a release? > > In previous releases I'd download everything and do some ad-hoc > commands, but not as automated as it could be. Since we have a > regular directory structure it should be possible to have a script > that would verify everything and produce a report.
unless you are trying to verify the download, there is no need to download anything, just ssh to people.apache.org and check the integrity in place once moved to the /www/www.apache.org/dist/ folder. Something like: arielch@~$ for i in /home/jsc/public_html/developer-snapshots/RC/4.0.0/binaries/*/*.asc ; do echo "Checking $i" && gpg2 --verify $i;done Regards --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
