Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SHA256 sum failed Linux binary (no high priority or security implications) #359

Closed
MCM-Mike opened this issue Mar 9, 2020 · 5 comments · Fixed by #360
Closed

SHA256 sum failed Linux binary (no high priority or security implications) #359

MCM-Mike opened this issue Mar 9, 2020 · 5 comments · Fixed by #360

Comments

@MCM-Mike
Copy link

MCM-Mike commented Mar 9, 2020

When you automatically checking the SHA256 sum of a binary we encountered a problem. When checking with the usual "sha256sum" Linux tools you will receive an error due to a directory in checksum file:

error:
sha256sum: /home/vsts/work/1/a/grin-wallet-v3.1.0-linux-amd64.tar.gz: No such file or directory /home/vsts/work/1/a/grin-wallet-v3.1.0-linux-amd64.tar.gz: FAILED open or read sha256sum: WARNING: 1 listed file could not be read

sha256 checksum file
SHA256(/home/vsts/work/1/a/grin-wallet-v3.1.0-linux-amd64.tar.gz)= bdc0ea8b8163bee7265ed63ee525720f3ad511b984987189a719427362b00313
Could you upload only the filename and the associate hash value in order to check this automatically?

@MCM-Mike MCM-Mike changed the title SHA256 sum check without directory SHA256 sum failed Linux binary (no high priority or security implications) Mar 9, 2020
@jaspervdm
Copy link
Contributor

I can't reproduce

$ sha256sum grin-wallet-v3.1.0-linux-amd64.tar.gz
bdc0ea8b8163bee7265ed63ee525720f3ad511b984987189a719427362b00313  grin-wallet-v3.1.0-linux-amd64.tar.gz

@MCM-Mike
Copy link
Author

MCM-Mike commented Mar 9, 2020

This is why I did mention the hash itself is correct but if you use the automated check by:

`_$ sha256sum -c grin-wallet-v3.1.0-linux-amd64-sha256sum.txt

sha256sum: /home/vsts/work/1/a/grin-wallet-v3.1.0-linux-amd64.tar.gz: No such file or directory
/home/vsts/work/1/a/grin-wallet-v3.1.0-linux-amd64.tar.gz: FAILED open or read
sha256sum: WARNING: 1 listed file could not be read
`
Both files sha256sum and tar.gz are in the same directory when doing this check.

You will get an error because you did set a directory within the sha256sum file "/home/vsts/..." where the tar.gz file should be located.

@jaspervdm
Copy link
Contributor

jaspervdm commented Mar 9, 2020

Oh i see what you mean, didn't know about the -c flag. Will see if i can fix it!

@MCM-Mike
Copy link
Author

MCM-Mike commented Mar 9, 2020

You can fix this by just change the grin-wallet-v3.1.0-linux-amd64-sha256sum.txt content to:

SHA256(grin-wallet-v3.1.0-linux-amd64.tar.gz)= bdc0ea8b8163bee7265ed63ee525720f3ad511b984987189a719427362b00313

This allows us to check the file in the same directory.

@MCM-Mike
Copy link
Author

MCM-Mike commented Jun 3, 2020

push, as its sill not fixed with latest release 3.1.2

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants