Waterfox icon indicating copy to clipboard operation
Waterfox copied to clipboard

Checksums for latest Waterfox Release

Open gamesharkmike opened this issue 3 years ago • 3 comments

What happened?

https://www.waterfox.net/download/

It is essential that you verify the integrity of the downloaded files using the SHA signatures. Most operating systems support the `shasum` command. Download the accompanying .SHA512 file and check the contents of its file using cat. Compare that value to the output of shasum.
cat $DOWNLOADED_FILE.SHA512
# Output of cat command here.

shasum -a 512 $DOWNLOADED_FILE
# Output of shasum command here.

# If the output of both commands is the same, the file is likely to be safe.

Where can I get the checksums for the lastest waterfox release?

https://github.com/WaterfoxCo/Waterfox/releases/tag/G4.1.2.1 I see no checksums files :(

Reproducible?

  • [X] I have tested this on Firefox.

Version

G4

What platform are you seeing the problem on?

Windows

Relevant log output

N/A

gamesharkmike avatar Jun 03 '22 00:06 gamesharkmike

I'm seeing the same issue for macos.

catxeger avatar Jun 10 '22 20:06 catxeger

We are looking into getting checksums displayed somewhere for users. Will get back to you on this.

adamp01 avatar Jul 06 '22 14:07 adamp01

Thank you.

I compared the latest version at the time of download to search result of the hash https://www.download3k.com/Install-Waterfox.html I wouldn't download WaterFox from there when I can DL from the offical sources, but the checksum was helpful.

Also, you can use the -c argument on the checksums files and it will autmatically calculate and compare the signature (good word, I was explaining hashing to someone not tech-savy and used the term compare the calculated "MD5 number" but its hexadecial so there are letters A-F included also and used the term value instead), given the checksum files are formatted correctly (it's picky, even though the format and spacing is correct and it errors over the format, I think it's the endline character parsing).

EDIT: Newer shasum commands aren't as picky, however using the dos2unix command (available in Git Bash, WSL, Cygwin,etc) the encoding can be converted for use with older versions (ex the one included with the version of Git Bash I have installed).

In Python, "string".encode(), open file as "wb" and write the encoded byte string.

gamesharkmike avatar Jul 06 '22 16:07 gamesharkmike

With the latest version of the website, hopefully it does what you'd hope :-)

https://www.waterfox.net/en-US/download/

MrAlex94 avatar Sep 20 '23 15:09 MrAlex94