1 (edited by daweed 2017-04-19 08:03:07)

Topic: Checksum for http://www.iredmail.org/yum/misc/ files

==== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.6
- Linux/BSD distribution name and version: Debian 3.16.36-1+deb8u2 x86_64 GNU/Linux
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? No
- Related log if you're reporting an issue:
====

Hello,

First of all, thanks for your project, you're making a great work.

I've just made my first iRedMail upgrade (0.9.5 to 0.9.6) and during the upgrade of iRedADP and iRedAdmin I was surprised to not found anything about checking the integrity of the files from http://www.iredmail.org/yum/misc/

Furthermore, theses files are not served trough https.

Am I missing something ? I didn't find anything about that in the docs. How do we can check if the files we download weren't modified by some nasty man-in-the-middle ?

Thanks a lot,

David

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: Checksum for http://www.iredmail.org/yum/misc/ files

You can find MD5 for them here:
https://bitbucket.org/zhb/iredmail/src/ … s/MD5.misc

iRedMail installer will download files and verify the MD5.