Bug 336492 - ftp.kde.org should include MD5 files for files
Summary: ftp.kde.org should include MD5 files for files
Status: RESOLVED INTENTIONAL
Alias: None
Product: www.kde.org
Classification: Websites
Component: general (show other bugs)
Version: unspecified
Platform: unspecified Other
: NOR normal
Target Milestone: ---
Assignee: kde-www mailing-list
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-06-20 12:18 UTC by Hanspeter Niederstrasser
Modified: 2014-06-20 12:20 UTC (History)
0 users

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Hanspeter Niederstrasser 2014-06-20 12:18:11 UTC
The directories in ftp.kde.org should include MD5SUMS files for each source directory.  This makes it easy to get the hashes, especially for packagers who would otherwise have to download the tarballs, calculate hash, then redownload using the distro recipe.

Reproducible: Always




Calligra already does this in their directory: ftp://ftp.kde.org/pub/kde/stable/calligra-2.8.3/MD5SUMS
Would be nice if the main kde src folder also did: ftp://ftp.kde.org/pub/kde/stable/4.13.2/src/
Comment 1 Ben Cooksley 2014-06-20 12:20:41 UTC
ftp.kde.org is an unsupported service and should not be in use.
All access to KDE source tarballs should be via download.kde.org, which provides .md5 and .sha1 files for all files it hosts.

In any case, we won't be adding such files because they can easily be compromised by an attacker who has gained control of a given mirror.