Where are the file checksums?

users
#1

Greetings,
I have just downloaded the 4.1.5 version. However, I cannot find the file/page containing the file checksums on the website to verify I have good files. Before the website had been revamped lately, these files which contained the checksums, sha sums, etc. were available right up front. I was able to get them for 4.1.4, but not 4.1.5, so it is a recent omission. Does anyone know where these files are now located?

BTW: I am using http://www.libreoffice.org/ to download from.
Thanks in advance.
Girvin Herr

#2

I believe this question was asked recently (or maybe it was on a localized
list).

Anyway, from the main libreoffice.org page, here's the step to get the
various checksums:
​​- Click on "Download now"
- Click on "Info"
The page show a list of various hash to use. Same goes for different
OS/Languages/Versions; as far as my testing goes, the Info page always
contain checksums (the 4.1.5 too).

#3

Yes! That was it. Thanks.
I do seem to remember this question being posted a while back, but I must not have saved it then and couldn't remember the solution now. I am definitely putting this solution in my computer notes list for the future. I must have gotten distracted by the "torrent" caption, which I do not use, and ignored the "Info" option. This link should be more prominent and have a better title than "Info" for us "blind" guys.
Thanks again.
Girvin

#4

For earlier versions that have dropped from the LibreOffice mirror system--
see the TDF LibreOffice archives
<http://downloadarchive.documentfoundation.org/libreoffice/old/> .

The MD5, SHA1 and SHA256 hashes are recorded in the 'Details' links for each
file.

For most folks, using the hash and skipping the GPG verification is
sufficient.

But, if you are super cautious, you'll need to use a GnuPG client to
extract and verify the .ASC PGP signature of the download.

Note: on Windows that would probably be Gpg4win
<http://gpg4win.org/download.html> , it offers the Kleopatra GUI to
simplify the steps.

For any OS, you'll need the LibreOffice project public key, named....
0xf434a1efafeeaea3

Done from CLI with

     gpg --keyserver hkp://keys.gnupg.net --recv-keys AFEEAEA3

and then running the GPG verify against the .ASC signature for the
download. Both the installer package and the signature file need to be in
the same directory.

     gpg --verify LibreOffice_4.1.5.3_Win_x86.msi.asc

In doing so, you both verify the signature of the download (that it came
from TDF build process) and coincidentally verify the integrity
--completeness-- of the download.

And for completeness, the Apache OpenOffice folks sign with public key
51B5FDE8

Stuart

#5

Stuart,
Thanks for the help. I do use gpg when available. I will get the LO public key and use it from now on.
Thanks again.
Girvin