Re: Checksum file location question

2021-02-01 Thread Rick Thomas
The list of "recent" GPG keys on that page stops at 2016.  Maybe somebody
could update that to cover 2020/21 ?

On Thu, Jan 28, 2021 at 3:15 AM Richard Owlett  wrote:

> On 01/27/2021 07:32 PM, H Kyu wrote:
> > Where can I find the file that shows a list of checksums for ISO Debian
> > images?  Thanks!
>
> You will not find *ALL* checksums for ISO images at a single URL.
> To find checksum of interest start at
> https://cdimage.debian.org/debian-cd/current/
> select architecture of interest (e.g. for amd64)
> https://cdimage.debian.org/debian-cd/current/amd64/
> select distribution format (e.g. iso-dvd)
> https://cdimage.debian.org/debian-cd/current/amd64/iso-dvd/
> at bottom of page pick your preferred checksum,
>
> Footnote:
> This information should really be accessible from
> https://www.debian.org/CD/verify
>
>
>
>
>


Re: Checksum file location question

2021-02-01 Thread Steve McIntyre
On Mon, Feb 01, 2021 at 04:01:55PM -0800, Rick Thomas wrote:
>The list of "recent" GPG keys on that page stops at 2016.  Maybe somebody could
>update that to cover 2020/21 ?

We haven't changed the CD signing keys since that was written. It's
something we've talked about doing, but not done yet. There used to be
some older keys too (hence the "recent" text), but they've all been
retired and I even re-signed the old checksums files at the time.

-- 
Steve McIntyre, Cambridge, UK.st...@einval.com
'There is some grim amusement in watching Pence try to run the typical
 "politician in the middle of a natural disaster" playbook, however
 incompetently, while Trump scribbles all over it in crayon and eats some
 of the pages.'   -- Russ Allbery