why is wireshark not signed??? asked 26 Dec '10, 11:56  awgi |
2 Answers:
There was a discussion about this in bug 1086. answered 29 Dec '10, 19:21  cmaynard ♦♦ |
Hashes for each release file can be found in a "SIGNATURES" file for each release. For example, the signature file for 1.4.2 is at http://www.wireshark.org/download/src/all-versions/SIGNATURES-1.4.2.txt. It is signed with my GPG key. The hashes can also be found in each release announcement, which is also signed. We don't sign the Windows packages with Authenticode signatures but we should. I'll see if I can add that to the release process. answered 07 Jan '11, 11:45  Gerald Combs ♦♦ |
