Create Task
Maniphest T8151

Host SHA256 checksums of the daily builds on https
Open, Needs TriagePublic
Actions

Description

It's not exactly a confidence booster for the testers to see the ISOs, checksums and whatnot on a non-https server. http://cdimage.ubuntu.com/kubuntu/daily-live/current/SHA256SUMS. For security reasons, I suggest to have the SHA256 sum of the daily builds on https, even if that means the Kubuntu main download page.

raddison created this task.Mar 5 2018, 11:32 PM
raddison updated the task description. (Show Details)Mar 5 2018, 11:35 PM
ragreen added subscribers: rikmills, ragreen.Mar 26 2018, 2:23 PM

@raddison Well, I kinda understand what you mean. The SHA256SUMS.gpg key, the SHA256 and the .iso images are all in one basket.

I've downloaded the latest kubuntu-18.04-beta1-desktop-amd64.iso

The SHA256 reads:

db158b92f72c20cb7a39660cafe78eca92a768ac598e4e6b968948389b3d20a6

@rikmills I hope it's accurate.

ragreen added a comment.Apr 12 2018, 9:07 AM

@rikmills I'm ready to check kubuntu-18.04-beta2-desktop-amd64

This is what I see

00b67204dcd623e92f615288caaa4e16e93fe45d7bef6dd9c1509785df393244