Fedora 12 download problems

[Todd Zullinger]

Fred Yontz wrote:
> Dear Fedora Webmaster
>
> First off, I'm not sure whether you are the appropriate person to
> contact about the problem I'm having, and if I'm in the wrong place,
> please excuse me.  I've looked at the lists of other places ---
> mailing lists, forums, IRC, community websites --- and I have no
> idea where in that collection I should turn.  So let me describe the
> problems I've had, and please help me if you can, or point me to
> where I should have gone.

Usually, the fedora-list is the place to go for general support.  But
this address is alright for issues that are (or may be) problems with
the website. :)

> I downloaded the Fedora 12 Desktop Edition installable Live CDs for
> both the standard (Gnome) and KDE versions, and the Live Media
> checksum files for each.  To verify my downloads, I first used the
> SHA1 checksum calculator in my EF Commander file manager, but the
> SHA1 checksums didn't match those I downloaded.  So I followed your
> advice to download and install HashCalc, and then used it to
> calculate the SHA1 hashes.  These results matched what I got from EF
> Commander, but not the checksums on your Verify your ISO download
> <https://fedoraproject.org/en/verify> web page.

I think you must have missed the large red warning at the top of
https://fedoraproject.org/en/verify which says:

    Please note that the Hash: SHA1 line in the CHECKSUM file is part
    of the PGP signature. It does not specify the type of hash used to
    verify the .iso files.

The checksums themselves use SHA256 as the hash algorithm.  We've got
an open bug to improve the instructions for Windows users, as they
still refer to sha1sum, incorrectly¹.  I'm not certain what Windows
tools can verify SHA256 checksums.  Our hope is to be able to provide
a sha256sum.exe for Windows users, but that process is not complete
yet.

¹ https://bugzilla.redhat.com/show_bug.cgi?id=527060

-- 
Todd        OpenPGP -> KeyID: 0xBEAF0CE3 | URL: www.pobox.com/~tmz/pgp
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Many people lose their tempers merely by seeing you keep yours.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 542 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-websites-list/attachments/20091219/5c9ba8c8/attachment.sig>