Ruby 1.6.8 md5 sum?

ruby-talk
1

I am delighted to see that 1.6.8 is now out. Thank you, Matz.

Could someone kindly confirm that the md5 sum for the tgz is:

MD5 (ruby-1.6.8.tar.gz) = bf48d49dbd94b5c0eda5f75b3bfbac16

please? A trawl through the arhives did not find this information.

Putting this information on the same machine as the file itself
would not help, because both the file and the alleged digest could
both be tampered with if the machine were compromised. Is it worth
holding this sort of data on RubyCentral and/or a non-wiki part of
RubyGarden?

    Thank you,
    Hugh
2

Could someone kindly confirm that the md5 sum for the tgz is:

MD5 (ruby-1.6.8.tar.gz) = bf48d49dbd94b5c0eda5f75b3bfbac16

please? A trawl through the arhives did not find this information.

md5sum for the archive on my local disk:

bf48d49dbd94b5c0eda5f75b3bfbac16 /home/matz/work/ruby/archive/ruby-1.6.8.tar.gz

Putting this information on the same machine as the file itself
would not help, because both the file and the alleged digest could
both be tampered with if the machine were compromised. Is it worth
holding this sort of data on RubyCentral and/or a non-wiki part of
RubyGarden?

It should be included in the announce mail (it used to be). Please
forgive my omission.

						matz.
···

In message “Ruby 1.6.8 md5 sum?” on 03/01/07, Hugh Sasse Staff Elec Eng hgs@dmu.ac.uk writes:

3

Hugh Sasse Staff Elec Eng wrote:

Putting this information on the same machine as the file itself
would not help, because both the file and the alleged digest could
both be tampered with if the machine were compromised. Is it worth
holding this sort of data on RubyCentral and/or a non-wiki part of
RubyGarden?

an alternative would be for matz to digitally sign the *.md5 file
(provided that matz uses pgp/gpg and his public key is easily
available). that way, the md5 is not so easily tampered.

···

–
dave

4

Could someone kindly confirm that the md5 sum for the tgz is:
[…]
md5sum for the archive on my local disk:

bf48d49dbd94b5c0eda5f75b3bfbac16 /home/matz/work/ruby/archive/ruby-1.6.8.tar.gz

Excellent! Thank you.

    [...]

holding this sort of data on RubyCentral and/or a non-wiki part of
RubyGarden?

It should be included in the announce mail (it used to be). Please
forgive my omission.

I intended no criticism, sorry! Would you consider re-posting the
announcement, together with the md5 for 1.8.x, so the information
can be easily found in the archives?

  					matz.

    Thank you again,
    Hugh
···

On Tue, 7 Jan 2003, Yukihiro Matsumoto wrote:

In message “Ruby 1.6.8 md5 sum?” > on 03/01/07, Hugh Sasse Staff Elec Eng hgs@dmu.ac.uk writes:

5

Hi,

···

In message “Re: Ruby 1.6.8 md5 sum?” on 03/01/07, Hugh Sasse Staff Elec Eng hgs@dmu.ac.uk writes:

Would you consider re-posting the
announcement, together with the md5 for 1.8.x, so the information
can be easily found in the archives?

1c37ec680b91cbea7a343252e4bd1e8d ruby-1.8.0-preview1.tar.gz

But remember, preview1 is supposed to be an evidence to show I’m
serious about 1.8.0 release in the near future. A lot of work left to
be done before actual release.

						matz.