Re: SHA256.sig not contained in install62.iso

2018-02-22 Thread Tom Smyth
Leroy, You can use any mirror as long as the mirror contains the patches for your version and architecture, mirrors should have identical content (once they are all synced ) ... you can change PKG_PATH at anytime (except when installing something ) I hope this helps On 22 February 2018 at 2

Re: SHA256.sig not contained in install62.iso

2018-02-22 Thread leroy jordan
So what can you do if the installurl file dose not mach the mirror site that you downloaded the iso from. In my case I download it from New York however I have Sonic which is San Francisco. On Feb 22, 2018 7:36 AM, "Marcus MERIGHI" wrote: > t...@equalit.ie (tomr), 2018.02.22 (Thu) 12:35 (CET):

Re: SHA256.sig not contained in install62.iso

2018-02-22 Thread Marcus MERIGHI
t...@equalit.ie (tomr), 2018.02.22 (Thu) 12:35 (CET): > On 02/21/18 04:39, Kevin Chadwick wrote: > > On Tue, 20 Feb 2018 19:23:05 +0200 > > > > > >> Isn't the same true when I download file sets from any mirror? After > >> all I download SHA256.sig abd file sets from mirror, how can I trust > >>

Re: SHA256.sig not contained in install62.iso

2018-02-22 Thread tomr
On 02/21/18 04:39, Kevin Chadwick wrote: > On Tue, 20 Feb 2018 19:23:05 +0200 > > >> Isn't the same true when I download file sets from any mirror? After >> all I download SHA256.sig abd file sets from mirror, how can I trust >> it? > > I am not a developer but my take is that they do not want

Re: SHA256.sig not contained in install62.iso

2018-02-22 Thread Marcus MERIGHI
m8il1i...@gmail.com (Kevin Chadwick), 2018.02.21 (Wed) 19:07 (CET): > On Wed, 21 Feb 2018 10:10:30 +0100 > > > > I know this is a little bit farfetched, pardon my ignorence, but > > OpenBSD seeems vulnerable on first installation. In case of DNS > > poisoning, what can stop a virus from forwardin

Re: SHA256.sig not contained in install62.iso

2018-02-21 Thread Kenneth Gober
On Wed, Feb 21, 2018 at 4:10 AM, Jean-Michel Pouré wrote: > I know this is a little bit farfetched, pardon my ignorence, but > OpenBSD seeems vulnerable on first installation. In case of DNS > poisoning, what can stop a virus from forwarding the installer to a > false SHA256.sig and false reposito

Re: SHA256.sig not contained in install62.iso

2018-02-21 Thread Theo de Raadt
>On Tue, 20 Feb 2018 18:45:01 +0100 >Stefan Sperling wrote: > >> > I download SHA256.sig abd file sets from mirror, how can I trust it? >> >> You run a trusted signify binary, which was not obtained from the >> mirror but is part of your existing install, to check the signature >> on SHA256.sig.

Re: SHA256.sig not contained in install62.iso

2018-02-21 Thread Stuart Henderson
On 2018-02-21, Jean-Michel Pouré wrote: > On Tue, 20 Feb 2018 18:45:01 +0100 > Stefan Sperling wrote: > >> > I download SHA256.sig abd file sets from mirror, how can I trust it? >> >> You run a trusted signify binary, which was not obtained from the >> mirror but is part of your existing install

Re: SHA256.sig not contained in install62.iso

2018-02-21 Thread Theo de Raadt
>If someone is able to provide a fake ISO, he will also provide fake >SHA256.sig and/or fake public key on the ISO. So there is no gain to >provide such material as people will think "it is safe" whereas it is >not. that is true. however, the real reason it isn't on the media is that internal sig

Re: SHA256.sig not contained in install62.iso

2018-02-21 Thread Kevin Chadwick
On Wed, 21 Feb 2018 10:10:30 +0100 > I know this is a little bit farfetched, pardon my ignorence, but > OpenBSD seeems vulnerable on first installation. In case of DNS > poisoning, what can stop a virus from forwarding the installer to a > false SHA256.sig and false repository? My guess would be

Re: SHA256.sig not contained in install62.iso

2018-02-21 Thread Sebastien Marie
On Wed, Feb 21, 2018 at 10:10:30AM +0100, Jean-Michel Pouré wrote: > > I know this is a little bit farfetched, pardon my ignorence, but > OpenBSD seeems vulnerable on first installation. In case of DNS > poisoning, what can stop a virus from forwarding the installer to a > false SHA256.sig and fal

Re: SHA256.sig not contained in install62.iso

2018-02-21 Thread Jean-Michel Pouré
On Tue, 20 Feb 2018 18:45:01 +0100 Stefan Sperling wrote: > > I download SHA256.sig abd file sets from mirror, how can I trust it? > > You run a trusted signify binary, which was not obtained from the > mirror but is part of your existing install, to check the signature > on SHA256.sig. I know

Re: SHA256.sig not contained in install62.iso

2018-02-20 Thread Stefan Sperling
On Tue, Feb 20, 2018 at 07:23:05PM +0200, mazocomp wrote: > Isn't the same true when I download file sets from any mirror? No. > After all > I download SHA256.sig abd file sets from mirror, how can I trust it? You run a trusted signify binary, which was not obtained from the mirror but is part o

Re: SHA256.sig not contained in install62.iso

2018-02-20 Thread Kevin Chadwick
On Tue, 20 Feb 2018 19:23:05 +0200 > Isn't the same true when I download file sets from any mirror? After > all I download SHA256.sig abd file sets from mirror, how can I trust > it? I am not a developer but my take is that they do not want to tell you it is verified if you have been given a CD

Re: SHA256.sig not contained in install62.iso

2018-02-20 Thread mazocomp
On Tue, Feb 20, 2018 at 12:59:08PM +0100, Theo Buehler wrote: > On Tue, Feb 20, 2018 at 12:56:06PM +0100, Nicolas Schmidt wrote: > > Hi, > > > > I am finally getting around to upgrading 6.1->6.2. When I try to install > > from CD using the install62.iso image, the install script complains that it

Re: SHA256.sig not contained in install62.iso

2018-02-20 Thread Nicolas Schmidt
Sorry, I of course meant to say it‘s *not* on it. > Am 20.02.2018 um 12:56 schrieb Nicolas Schmidt : > > Hi, > > I am finally getting around to upgrading 6.1->6.2. When I try to install from > CD using the install62.iso image, the install script complains that it can't > find SHA256.sig (indee

Re: SHA256.sig not contained in install62.iso

2018-02-20 Thread Theo Buehler
On Tue, Feb 20, 2018 at 12:56:06PM +0100, Nicolas Schmidt wrote: > Hi, > > I am finally getting around to upgrading 6.1->6.2. When I try to install from > CD using the install62.iso image, the install script complains that it can't > find SHA256.sig (indeed, it's on it). > > Is that supposed to

SHA256.sig not contained in install62.iso

2018-02-20 Thread Nicolas Schmidt
Hi, I am finally getting around to upgrading 6.1->6.2. When I try to install from CD using the install62.iso image, the install script complains that it can't find SHA256.sig (indeed, it's on it). Is that supposed to happen? Best, Nicolas A. Schmidt