Is it possible to publish the signatures file with each release set instead of only the signature file for the current main release?

asked 2021-08-28 15:37:54 +0000

The signature file for the Old Stable Release and the new Development Release are not on the download page, so where are the signatures to check that downloads or file moves are generating the correct results?

edit retag flag offensive close merge delete

Comments

Are you looking for signature or hashes?

Do you have a hash of your install files?

Chuckc ( 2021-08-28 17:29:23 +0000 )edit

Thanks everyone. I'll submit an issue on the wireshark-web issues page.

mybasementcloud ( 2021-08-29 18:07:27 +0000 )edit

add a comment

2 Answers

Sort by » oldest newest most voted

answered 2021-08-29 00:26:23 +0000

Guy Harris
19890 ●3 ●660 ●207

Is it possible to publish the signatures file with each release set instead of only the signature file for the current main release?

Probably. Please file an issue on the wireshark-web issues page requesting that the downloads page have, in the "Verify Downloads", links for signatures for the old stable and development releases as well as for the current stable release.

edit flag offensive delete link

add a comment

answered 2021-08-28 17:35:21 +0000

Chuckc
3023 ●6 ●611 ●20

From the User's Guide - 1.3. Where To Get Wireshark

"SIGNATURES files can be found at https://www.wireshark.org/download/sr..."

Each release includes a list of file hashes which are sent to the wireshark-announce mailing list and placed in a file named SIGNATURES-x.y.z.txt. Announcement messages are archived at https://www.wireshark.org/lists/wireshark-announce/ and SIGNATURES files can be found at https://www.wireshark.org/download/src/all-versions/. Both are GPG-signed and include verification instructions for Windows, Linux, and macOS. As noted above, you can also verify downloads on Windows and macOS using the code signature validation features on those systems.

edit flag offensive delete link

add a comment