Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Dnssec-Trigger dependency doesn't have publicly verifiable hashes. #2

Closed
JeremyRand opened this issue May 25, 2017 · 2 comments
Closed

Comments

@JeremyRand
Copy link
Member

NLnet Labs' Dnssec-Trigger website lists version 0.13 as the latest Windows release. Unfortunately, the official Windows binary of 0.13 is completely broken. Wouter Wijngaards from NLnet Labs is recommending that Windows users use a binary that he posted for version 0.14_20170106_2. Unfortunately, while that version works, it doesn't have hashes posted anywhere, which makes our distribution of it less easy to audit and reproduce. I reported this issue to NLnet Labs on 2017 Mar 27, but they haven't replied.

Might be worth filing a bug on NLnet Labs' bug tracker instead of using their mailing list.

@JeremyRand
Copy link
Member Author

SHA1 hashes, SHA256 hashes, and OpenPGP detached signatures for Dnssec-Trigger 0.14 (source code, Windows installer, and macOS installer) are available at https://www.nlnetlabs.nl/downloads/dnssec-trigger/ . So, this should resolve itself when we fix #29

@JeremyRand
Copy link
Member Author

Should be fixed now.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant