LBRYCommunity/lbrycrd
1
0
Fork 0
Code Issues 29 Pull requests 1 Projects Releases 32 Packages Wiki Activity

Merge #8557: [contrib] Rework verifybinaries

Browse source 
faaed88 [contrib] verifybinaries: Mention mandatory preparation step (MarcoFalke)
fa917f6 [contrib] verifybinaries: Keep downloads by default (MarcoFalke)
fab1f92 [contrib] verifybinaries: Adjust parsing to new rc path (MarcoFalke)
This commit is contained in:
Wladimir J. van der Laan 2016-09-01 15:55:25 +02:00
commit 44691f3c51
No known key found for this signature in database
GPG key ID: 74810B012346C9A6
2 changed files with 33 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

22
contrib/verifybinaries/README.md
View file

@ -1,13 +1,33 @@
### Verify Binaries ### Verify Binaries
#### Preparation:
Make sure you obtain the proper release signing key and verify the fingerprint with several independent sources.
```sh
$ gpg --fingerprint "Bitcoin Core binary release signing key"
pub 4096R/36C2E964 2015-06-24 [expires: 2017-02-13]
Key fingerprint = 01EA 5486 DE18 A882 D4C2 6845 90C8 019E 36C2 E964
uid Wladimir J. van der Laan (Bitcoin Core binary release signing key) <laanwj@gmail.com>
```
#### Usage:
This script attempts to download the signature file `SHA256SUMS.asc` from https://bitcoin.org. This script attempts to download the signature file `SHA256SUMS.asc` from https://bitcoin.org.
It first checks if the signature passes, and then downloads the files specified in the file, and checks if the hashes of these files match those that are specified in the signature file. It first checks if the signature passes, and then downloads the files specified in the file, and checks if the hashes of these files match those that are specified in the signature file.
The script returns 0 if everything passes the checks. It returns 1 if either the signature check or the hash check doesn't pass. If an error occurs the return value is 2. The script returns 0 if everything passes the checks. It returns 1 if either the signature check or the hash check doesn't pass. If an error occurs the return value is 2.
Usage:
```sh ```sh
./verify.sh bitcoin-core-0.11.2 ./verify.sh bitcoin-core-0.11.2
./verify.sh bitcoin-core-0.12.0 ./verify.sh bitcoin-core-0.12.0
./verify.sh bitcoin-core-0.13.0-rc3
```
If you do not want to keep the downloaded binaries, specify anything as the second parameter.
```sh
./verify.sh bitcoin-core-0.13.0 delete
``` ```

19
contrib/verifybinaries/verify.sh
View file

@ -14,11 +14,11 @@ function clean_up {
done done
} }
WORKINGDIR="/tmp/bitcoin" WORKINGDIR="/tmp/bitcoin_verify_binaries"
TMPFILE="hashes.tmp" TMPFILE="hashes.tmp"
SIGNATUREFILENAME="SHA256SUMS.asc" SIGNATUREFILENAME="SHA256SUMS.asc"
RCSUBDIR="test/" RCSUBDIR="test"
BASEDIR="https://bitcoin.org/bin/" BASEDIR="https://bitcoin.org/bin/"
VERSIONPREFIX="bitcoin-core-" VERSIONPREFIX="bitcoin-core-"
RCVERSIONSTRING="rc" RCVERSIONSTRING="rc"
@ -43,7 +43,7 @@ if [ -n "$1" ]; then
# and simultaneously add RCSUBDIR to BASEDIR, where we will look for SIGNATUREFILENAME # and simultaneously add RCSUBDIR to BASEDIR, where we will look for SIGNATUREFILENAME
if [[ $VERSION == *"$RCVERSIONSTRING"* ]]; then if [[ $VERSION == *"$RCVERSIONSTRING"* ]]; then
BASEDIR="$BASEDIR${VERSION/%-$RCVERSIONSTRING*}/" BASEDIR="$BASEDIR${VERSION/%-$RCVERSIONSTRING*}/"
BASEDIR="$BASEDIR$RCSUBDIR" BASEDIR="$BASEDIR$RCSUBDIR.$RCVERSIONSTRING${VERSION: -1}/"
else else
BASEDIR="$BASEDIR$VERSION/" BASEDIR="$BASEDIR$VERSION/"
fi fi
@ -93,7 +93,7 @@ fi
FILES=$(awk '{print $2}' "$TMPFILE") FILES=$(awk '{print $2}' "$TMPFILE")
#and download these one by one #and download these one by one
for file in in $FILES for file in $FILES
do do
wget --quiet -N "$BASEDIR$file" wget --quiet -N "$BASEDIR$file"
done done
@ -108,11 +108,16 @@ if [ $? -eq 1 ]; then
exit 1 exit 1
elif [ $? -gt 1 ]; then elif [ $? -gt 1 ]; then
echo "Error executing 'diff'" echo "Error executing 'diff'"
exit 2 exit 2
fi fi
#everything matches! clean up the mess if [ -n "$2" ]; then
clean_up $FILES $SIGNATUREFILENAME $TMPFILE echo "Clean up the binaries"
clean_up $FILES $SIGNATUREFILENAME $TMPFILE
else
echo "Keep the binaries in $WORKINGDIR"
clean_up $TMPFILE
fi
echo -e "Verified hashes of \n$FILES" echo -e "Verified hashes of \n$FILES"