bug-coreutils
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

bug#15604: sha256sum (and others of the *sum family) lacks important opt


From: Hadmut Danisch
Subject: bug#15604: sha256sum (and others of the *sum family) lacks important option
Date: Sun, 13 Oct 2013 12:31:15 +0200
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.0

Hi,

the hashsum check files like  sha256sum would be quite usefull (and
improve security), if they could easily be used within shellscripts to
verify downloads. E.g. Ubuntu provides signed hash files like

http://releases.ubuntu.com/precise/SHA256SUMS
http://releases.ubuntu.com/precise/SHA256SUMS.gpg


But one rarely downloads all files, only the needed ones.

Unfortunately, sha256sum prints warnings and exits with exit status 1
when files are missing, even when the present files are correct. This
makes checking the files more difficult in shellscripts and might keep
most script authors from checking downloads.

It would be significantly more usefull and thus more secure if  the *sum
commands had an additional option to not report missing files as an
error and to verify just the present files.

regards
Hadmut






reply via email to

[Prev in Thread] Current Thread [Next in Thread]