Verify Yii Download With Sha Or Pgp

Hi,

I did not see sha or pgp details in yii framework download page.

Is it possible to verify yii framework download with sha or pgp or

is there another method to verify a yii framework download?

Thanks.

Looks like no hashes have been made public since v1.1.13. Use git if you want to be absolutely sure your download has not been compromised.

If it helps: The ETag delivered via Github’s download service seems to be the MD5 of a file.




$ GET -de https://github.com/yiisoft/yii/releases/download/1.1.14/yii-1.1.14.f0fee9.tar.gz

200 OK

Cache-Control: max-age=31557600

Connection: close

Date: Sat, 04 Jan 2014 11:08:37 GMT

Accept-Ranges: bytes

ETag: "da64071a5ccfe815fcbb10df27a26033"

Server: AmazonS3

Content-Length: 4113676

Content-Type: application/octet-stream

Last-Modified: Mon, 12 Aug 2013 00:17:21 GMT

Client-Date: Sat, 04 Jan 2014 11:08:40 GMT

Client-Peer: 207.171.163.131:443

Client-Response-Num: 1

Client-SSL-Cert-Issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Secure Server CA - G3

Client-SSL-Cert-Subject: /C=US/ST=Washington/L=Seattle/O=Amazon.com Inc./CN=s3.amazonaws.com

Client-SSL-Cipher: AES256-SHA

Client-SSL-Socket-Class: IO::Socket::SSL

Content-Disposition: attachment; filename=yii-1.1.14.f0fee9.tar.gz

X-Amz-Id-2: FkVlwKJsFSGAayJLuFsv6mHudPZraQTAzAdHGjt3xNiALkTfAU4vLWchziRhoIv6

X-Amz-Meta-Surrogate-Control: max-age=31557600

X-Amz-Meta-Surrogate-Key: repository-3451238 user-993322

X-Amz-Request-Id: 1FB9A0E77EA62737


$ md5sum yii-1.1.14.f0fee9.tar.gz 

da64071a5ccfe815fcbb10df27a26033  yii-1.1.14.f0fee9.tar.gz