in reply to Digital signatures/checksums for Perl source tarballs

Checksums/digital signatures exist, but I don't know where to look (highly likely).

I don't think it's terribly obvious (or if they're kept elsewhere), but MD5 checksums can be found by peeking inside the CHECKSUMS file of the appropriate pumpking. Then the trick is working out who that was and then what their corresponding CPAN handle is.

Anyhoo, for the past few releases, you want to look at ...

Vers Pumpking Checksums
5.6.0 Gurusamy Sarathy http://www.cpan.org/authors/id/G/GS/GSAR/CHECKSUMS
5.6.1 Gurusamy Sarathy http://www.cpan.org/authors/id/G/GS/GSAR/CHECKSUMS
5.8.0 Jarkko Hietaniemi http://www.cpan.org/authors/id/J/JH/JHI/CHECKSUMS

    --k.


  • Comment on Re: Digital signatures/checksums for Perl source tarballs

Replies are listed 'Best First'.
Re: Re: Digital signatures/checksums for Perl source tarballs
by syxzys (Initiate) on Nov 06, 2002 at 21:12 UTC
    Hey thanks - that's just the sort of thing I was looking for. You're right though—it isn't obvious. Knowing to look in the pumpking's checksum file is the key. :)