Title: md5 or sha1 for Electrum 3.0.1 Post by: mike4001 on November 10, 2017, 09:13:26 PM Hello,
Can someone post a valid md5 or sha1 hash for Electrum 3.0.1. I downloaded the file and want to check it before running. I don't have PGP and a Google search showed that this will not be a quick check if you don't have the software and so on :) Title: Re: md5 or sha1 for Electrum 3.0.1 Post by: pooya87 on November 11, 2017, 04:44:53 AM i would recommend that you check the PGP signatures instead, specially if you are about to store some funds in this wallet that you jut downloaded. it is not hard to do it under windows. https://ssd.eff.org/en/module/how-use-pgp-windows
and it is super easy in Linux. i am assuming you have windows and here are the hashes for Windows Installer (https://download.electrum.org/3.0.1/electrum-3.0.1-setup.exe). use at your own risk. MD5 Code: 1c21679b30d38d3d9968cb9cb8cff65b SHA1 Code: 97c20adb2bd07b3a5d8bf22d59740b7b608b8d72 an screenshot of the steps: https://i.imgur.com/S2M6Ni6.jpg Title: Re: md5 or sha1 for Electrum 3.0.1 Post by: HCP on November 11, 2017, 06:49:49 AM i am assuming you have windows and here are the hashes for Windows Installer (https://download.electrum.org/3.0.1/electrum-3.0.1-setup.exe). use at your own risk. If it makes you feel any better... and it probably shouldn't, because MD5 and SHA1 don't really prove much... but I got the same hashes as Pooya87MD5 Code: 1c21679b30d38d3d9968cb9cb8cff65b SHA1 Code: 97c20adb2bd07b3a5d8bf22d59740b7b608b8d72 Quote --------------------------- Checksum information --------------------------- Name: electrum-3.0.1-setup.exe Size: 27657120 bytes (26 MB) SHA1: 97C20ADB2BD07B3A5D8BF22D59740B7B608B8D72 Quote ; 27657120 00:30.23 2017-11-08 electrum-3.0.1-setup.exe 1c21679b30d38d3d9968cb9cb8cff65b *electrum-3.0.1-setup.exe Title: Re: md5 or sha1 for Electrum 3.0.1 Post by: mike4001 on November 11, 2017, 07:02:40 AM Thank you both ... I want to try GnuPG but I believe I need some troubleshooting
Yes I am on Windows and installed GnuPG. But the first command results in Code: D:\Programme\Electrum>gpg --recv-keys 7F9470E6 Title: Re: md5 or sha1 for Electrum 3.0.1 Post by: HCP on November 11, 2017, 07:14:35 AM That looks OK... seems that you already have the key loaded on your system? ???
Did you download the .asc file? you might need to right click on it and select "save link as"... save it in the same folder as the .exe Then just try running the 2nd command: gpg --verify electrum-3.0.1-setup.exe.asc electrum-3.0.1-setup.exe Title: Re: md5 or sha1 for Electrum 3.0.1 Post by: mike4001 on November 11, 2017, 07:21:15 AM Well I tried a few other commands incluing creation of my private key. Maybe this did it?
Anyway: The second command gives me: Code: D:\Programme\Electrum>gpg --verify electrum-3.0.1.exe.asc electrum-3.0.1.exe Btw: I want to check the Standalone Executable and not the installer, but this shouldn't be the issue I think. Ah OK: So I can Ignore the WARNING? ... Because it kind of reads serious :-) Title: Re: md5 or sha1 for Electrum 3.0.1 Post by: HCP on November 11, 2017, 08:13:04 AM What the output is showing you, is that the file is indeed signed by ThomasV's key:
Quote gpg: Good signature from "Thomas Voegtlin (https://electrum.org) <thomasv@electrum.org>" [unknown] gpg: aka "ThomasV <thomasv1@gmx.de>" [unknown] gpg: aka "Thomas Voegtlin <thomasv1@gmx.de>" [unknown] However, because you have not explicitly stated that you trust that key (ie. it's not in your personal circle of trust) nor is it trusted by any of your "trusted" signatures... you end up with the "scary" warning: Quote gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. If you are satisfied that the key you have for ThomasV is trustworthy... and that ThomasV is a trustworthy person (because if you trust ThomasV, depending the level, by default you'll trust HIS trusted keys), you can add ThomasV's key to your list of trusted keys... then when you check the signatures, you won't get the warning. As mentioned, there are various levels of "trust", and it can be a very subjective thing. Refer: https://www.gnupg.org/gph/en/manual/x334.html for more info Title: Re: md5 or sha1 for Electrum 3.0.1 Post by: mike4001 on November 11, 2017, 10:51:35 AM OK, thank you very much for your explanation!
|