Automating checksum, signature verification & mirror usage for TortoiseSVN downloads

Hi,

You can use Metalinks for your downloads to automate mirror usage
along with checksum & signature verification. Metalinks are an XML
format that include all this & other info.

Over 35 apps & projects like OpenOffice.org, openSUSE, Ubuntu, &
others use Metalinks. There's a nice Firefox Addon called DownThemAll!
[1], or Metalink Checker [2], a command line downloader in Python that
verifies signatures. This can also be made transparent for downloaders
with TCN.

I've attached a sample .metalink, minus chunk checksums, but the files
are here (these only include 1 SF mirror but you could add all of
them).
http://www.metalinker.org/samples/TortoiseSVN-1.5.2.13595-win32-svn-1.5.1.msi.metalink
http://www.metalinker.org/samples/TortoiseSVN-1.5.2.13595-x64-svn-1.5.1.msi.metalink

--
(( Anthony Bryan ... Metalink [ http://www.metalinker.org ]
 )) Easier, More Reliable, Self Healing Downloads
[1] http://www.downthemall.net/
[2] http://metalinks.svn.sourceforge.net/viewvc/metalinks/checker/metalink.py?view=markup
<?xml version="1.0" encoding="utf-8"?>
<metalink version="3.0" generator="Metalink Editor version 1.1.0"
xmlns="http://www.metalinker.org/">
  <publisher>
    <url>http://tortoisesvn.net/</url>
  </publisher>
  <identity>TortoiseSVN</identity>
  <version>1.5.2</version>
  <description>TortoiseSVN is an easy to use SCM / source control
software for Microsoft Windows and maybe the best standalone
Subversion client there is.</description>
  <files>
    <file name="TortoiseSVN-1.5.2.13595-win32-svn-1.5.1.msi">
      <size>18682368</size>
      <os>Windows-x86</os>
      <verification>
        <hash type="md5">c91274d0131241b94e529fec8ba3a642</hash>
        <hash type="sha1">c6249684a391c6256dacc92e4aac2f1ac8936090</
hash>
        <hash
type="sha256">601859e61d21bc5e55a0c9cd3b63614f1d0e684d99fb02365109e9417ecf6d2a</
hash>
		<signature type="pgp">
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (MingW32)
iEYEABECAAYFAkiR6YEACgkQNTJADUWeLT78rACgoehzhwy/1m3uviUzI8eax6s3
XVAAoK+mXgAV+MLLrooJFTBhxDc0XjTL
=+VSP
-----END PGP SIGNATURE-----
	    </signature>
      </verification>
      <resources>
        <url type="http">http://voxel.dl.sourceforge.net/sourceforge/
tortoisesvn/TortoiseSVN-1.5.2.13595-win32-svn-1.5.1.msi</url>
      </resources>
    </file>
  </files>
</metalink>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe_at_tortoisesvn.tigris.org
For additional commands, e-mail: users-help_at_tortoisesvn.tigris.org