Bitcoin.org icon indicating copy to clipboard operation
Bitcoin.org copied to clipboard
verified publisher icon bitcoin-dot-org

bitcoin-core changed signing file structure as of version 22

Open grant-olson opened this issue 4 years ago • 2 comments

The page at https://bitcoin.org/en/download no longer links to the correct information to verify bitcoin core.

As of version 22 there is an unsigned file SHA256SUMS that has the checksums and a file SHA256SUMS.asc that now contains multiple signatures to verify the checksums. But on bitcoin.org there is currently no way to download the actual checksums.

A user should:

  1. Download both SHA256SUMS and SHA256SUMS.asc
  2. Use gpg to verify SHA256SUMS.
  3. Use the SHA256SUMS file to verify the bitcoin core download.

The page should be modified to include a link to SHA256SUMS. It is also possible there should be something added under Bitcoin Core Release Signing Keys to list the keys for version 22 and up.

grant-olson avatar Nov 14 '21 21:11 grant-olson

The file is present (hosted): https://bitcoin.org/bin/bitcoin-core-22.0/SHA256SUMS But there is no link to it indeed.

melroy89 avatar Dec 17 '21 01:12 melroy89

Ps. This template file needs to be adapted, with the link to the SHA256SUMS file, also we need to introduce additional translations for the new link.

Keys can be extended here on line 71 .

melroy89 avatar Dec 17 '21 02:12 melroy89