Hi,
I did not see sha or pgp details in yii framework download page.
Is it possible to verify yii framework download with sha or pgp or
is there another method to verify a yii framework download?
Thanks.
Hi,
I did not see sha or pgp details in yii framework download page.
Is it possible to verify yii framework download with sha or pgp or
is there another method to verify a yii framework download?
Thanks.
Looks like no hashes have been made public since v1.1.13. Use git if you want to be absolutely sure your download has not been compromised.
If it helps: The ETag delivered via Github’s download service seems to be the MD5 of a file.
$ GET -de https://github.com/yiisoft/yii/releases/download/1.1.14/yii-1.1.14.f0fee9.tar.gz
200 OK
Cache-Control: max-age=31557600
Connection: close
Date: Sat, 04 Jan 2014 11:08:37 GMT
Accept-Ranges: bytes
ETag: "da64071a5ccfe815fcbb10df27a26033"
Server: AmazonS3
Content-Length: 4113676
Content-Type: application/octet-stream
Last-Modified: Mon, 12 Aug 2013 00:17:21 GMT
Client-Date: Sat, 04 Jan 2014 11:08:40 GMT
Client-Peer: 207.171.163.131:443
Client-Response-Num: 1
Client-SSL-Cert-Issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Secure Server CA - G3
Client-SSL-Cert-Subject: /C=US/ST=Washington/L=Seattle/O=Amazon.com Inc./CN=s3.amazonaws.com
Client-SSL-Cipher: AES256-SHA
Client-SSL-Socket-Class: IO::Socket::SSL
Content-Disposition: attachment; filename=yii-1.1.14.f0fee9.tar.gz
X-Amz-Id-2: FkVlwKJsFSGAayJLuFsv6mHudPZraQTAzAdHGjt3xNiALkTfAU4vLWchziRhoIv6
X-Amz-Meta-Surrogate-Control: max-age=31557600
X-Amz-Meta-Surrogate-Key: repository-3451238 user-993322
X-Amz-Request-Id: 1FB9A0E77EA62737
$ md5sum yii-1.1.14.f0fee9.tar.gz
da64071a5ccfe815fcbb10df27a26033 yii-1.1.14.f0fee9.tar.gz