Skip to contentSkip to conversation

openssh: bump to version 6.7p1

PATCH New Gustavo Zacarias 3 participants 6 messages Oct 7, 2014

lore
Share & tools
lore

Gustavo Zacarias

author
#0 lore raw

PATCH 1/1 openssh: bump to version 6.7p1

Also add hash file.

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/openssh/openssh.hash | 2 ++
 package/openssh/openssh.mk   | 2 +-
 2 files changed, 3 insertions(+), 1 deletion(-)
 create mode 100644 package/openssh/openssh.hash
package/openssh/openssh.hash new file +2 -0
new file mode 100644
index 0000000..0b57d48
@@ -0,0 +1,2 @@
+# Locally calculated after checking pgp signature
+sha256	b2f8394eae858dabbdef7dac10b99aec00c95462753e80342e530bbb6f725507	openssh-6.7p1.tar.gz
package/openssh/openssh.mk +1 -1
index b934722..17097d5 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-OPENSSH_VERSION = 6.6p1
+OPENSSH_VERSION = 6.7p1
 OPENSSH_SITE = http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable
 OPENSSH_LICENSE = BSD-3c BSD-2c Public Domain
 OPENSSH_LICENSE_FILES = LICENCE
Signature · 1 line
2.0.4
#1 lore raw

PATCH 1/1 openssh: bump to version 6.7p1

Hi Gustavo,

Quoted 15 lines · Gustavo Zacarias

Also add hash file.

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/openssh/openssh.hash | 2 ++
 package/openssh/openssh.mk   | 2 +-
 2 files changed, 3 insertions(+), 1 deletion(-)
 create mode 100644 package/openssh/openssh.hash
package/openssh/openssh.hash new file +0 -0
new file mode 100644
index 0000000..0b57d48

package/openssh/openssh.hash line 2

Quoted 2 lines
package/openssh/openssh.hash new file +2 -0
@@ -0,0 +1,2 @@
+# Locally calculated after checking pgp signature
+sha256	b2f8394eae858dabbdef7dac10b99aec00c95462753e80342e530bbb6f725507	openssh-6.7p1.tar.gz

Why not use the (base64 encoded) hash values from
http://www.openssh.com/txt/release-6.7? The output of

	echo svg5Tq6Fjau9732sELma7ADJVGJ1PoA0LlMLu29yVQc= |base64 -d |hd

matches your calculated SHA256 AFAICS.

baruch

Signature · 3 lines
     http://baruch.siach.name/blog/                  ~. .~   Tk Open Systems
=}------------------------------------------------ooO--U--Ooo------------{=
   - baruch at tkos.co.il - tel: +972.2.679.5364, http://www.tkos.co.il -
author
#2 lore raw

PATCH 1/1 openssh: bump to version 6.7p1

Quoted 6 lines · Baruch Siach

Why not use the (base64 encoded) hash values from
http://www.openssh.com/txt/release-6.7? The output of

	echo svg5Tq6Fjau9732sELma7ADJVGJ1PoA0LlMLu29yVQc= |base64 -d |hd

matches your calculated SHA256 AFAICS.

Hi.
Because i've found out about the release from another source. Both are equally good though.
Regards.

#3 lore raw

PATCH 1/1 openssh: bump to version 6.7p1

Hi Gustavo,

Quoted 10 lines · Gustavo Zacarias
Quoted 6 lines · Baruch Siach

Why not use the (base64 encoded) hash values from
http://www.openssh.com/txt/release-6.7? The output of

	echo svg5Tq6Fjau9732sELma7ADJVGJ1PoA0LlMLu29yVQc= |base64 -d |hd

matches your calculated SHA256 AFAICS.

Because i've found out about the release from another source. Both are equally good though.

I think this link is worth mentioning in the .hash file. It allows the user to verify the hash against an external source, adding to the warm and fuzzy feeling that is the whole point of .hash files. This is especially important for sensitive packages like OpenSSH.

baruch

Signature · 3 lines
     http://baruch.siach.name/blog/                  ~. .~   Tk Open Systems
=}------------------------------------------------ooO--U--Ooo------------{=
   - baruch at tkos.co.il - tel: +972.2.679.5364, http://www.tkos.co.il -
#4 lore raw

PATCH 1/1 openssh: bump to version 6.7p1

Quoted 9 lines
Quoted 4 lines
Quoted 1 line
Quoted 1 line
Quoted 1 line

"Baruch" == Baruch Siach <[email protected]> writes:

Because i've found out about the release from another source. Both are equally good though.

I think this link is worth mentioning in the .hash file. It allows the user to verify the hash against an external source, adding to the warm and fuzzy feeling that is the whole point of .hash files. This is especially important for sensitive packages like OpenSSH.

Agreed.

Signature · 1 line
Bye, Peter Korsgaard