wine-mono md5sums / sha256 / signed

[p5chat]

Hi there,

can the wine mono msi/tar.gz/zips have either an md5sums, a sha256 sum, signed, or be available through the repo rather than from a https link only?

[jkfloris]

If you let Wine download Mono (or Gecko), it automatically checks the sha256 sum.

You can find the shasum in the source code
https://source.winehq.org/git/wine.git/ ... l/addons.c

Code: Select all

#define MONO_VERSION "7.1.1"
#if defined(__i386__) || defined(__x86_64__)
#define MONO_ARCH "x86"
#define MONO_SHA "9dc8e5603b7bc64354eb94ae4ea0f6821424767a3ff44ff0d19e346a490c11ea"
#else
#define MONO_ARCH ""
#define MONO_SHA "???"
#endif

...

/* Download addon files over HTTP because Wine depends on an external library
* for TLS, so we can't be sure that HTTPS will work. The integrity of each file
* is checked with a hardcoded cryptographically secure hash. */

[p5chat]

Just checked it the sha in this

Code: Select all

#define MONO_SHA "9dc8e5603b7bc64354eb94ae4ea0f6821424767a3ff44ff0d19e346a490c11ea"

is a 256bit shasum of the wine-mono-7.1.1-x86.msi. The other versions do not have a checksum.

[dimesio]

The shasum is updated whenever the wine-mono version is updated. You can generate a list from git with

Code: Select all

git log -p -- dlls/appwiz.cpl/addons.c | grep -e "+#define MONO_VERSION" -e "+#define MONO_SHA"