Discussion:
Potential irroneous checksum in InRelease file
Add Reply
john doe
2025-01-12 13:50:01 UTC
Reply
Permalink
Hi,

Is it intentional that the checksum for [1] is not in [2]?

[1]
http://ftp.debian.org/debian/dists/stable/main/installer-amd64/current/images/netboot/gtk/netboot.tar.gz
[2] http://ftp.debian.org/debian/dists/stable/InRelease

--
John Doe
john doe
2025-01-12 14:40:01 UTC
Reply
Permalink
Hi,
Is it intentional that theĀ  checksum for [1] is not in [2]?
[1]
http://ftp.debian.org/debian/dists/stable/main/installer-amd64/current/images/netboot/gtk/netboot.tar.gz
Should have been
http://ftp.debian.org/debian/dists/stable/main/installer-amd64/current/images/SHA256SUMS
[2] http://ftp.debian.org/debian/dists/stable/InRelease
Rewording, just to ensure that I'm clear enough (sorry about that)!

The checksum of SHA256SUMS is not to be found in the InRelease file.

Small shell script to show what I'm trying to say:

#!/bin/sh

checksum_of_checksum_file=$(sha256sum SHA256SUMS)
checksum_in_release_file=$(awk -v checksum=$checksum
'/main\/installer-amd64\/current\/images\/SHA256SUMS/' InRelease)

echo $checksum_of_checksum_file $checksum_in_release_file

--
--
John Doe

Loading...