binary verification

[martin.lonkwitz]

is it possible to get from the json response of https://download.foldingathome.org
including the sha256sum's of all binaries ? - especially we need the sha256sum's of the core binaries downloaded by the FAHClient during runtime.

[JimboPalmer]

I have been folding for 11 years and have never needed a checksum for a Folding@Home Core, they just work, and you can only get them directly from F@H.

What is it you are trying to do? So we can help you find some other way to do that.

Who is 'we'? Is some IT Department making impossible requests to avoid support?

Right at this instant, there are 3 active cores in Production.

CPU Core_a7 is at version 18
GPU Core_22 is at version 5
I have not seen a GPU Core_21 in four months, I have forgotten the version number. I do not expect them back until COVID-19 is done being researched at high priority.

Yours, Jimbo

[foldy]

If the request is for security reasons then I learned that you do not get additional security when you download the binary from the same server as the checksum. And FAH is the only server to download the core binaries from. It is not distributed like other linux package servers with many mirrors. There you need a common checksum to verify mirror servers give you the same binary as the original server.

[PantherX]

Please note that when a new FahCore is downloaded, it is verified by the client:

Code: Select all

05:45:34:WU00:FS01:Downloading core from http://cores.foldingathome.org/v7/win/64bit/Core_22.fah
05:45:34:WU00:FS01:Connecting to cores.foldingathome.org:80
05:45:34:WU00:FS01:FahCore 22: Downloading 4.04MiB
05:45:36:WU00:FS01:FahCore 22: Download complete
05:45:36:WU00:FS01:Valid core signature
05:45:36:WU00:FS01:Unpacked 13.50MiB to cores/cores.foldingathome.org/v7/win/64bit/Core_22.fah/FahCore_22.exe
05:45:36:WU00:FS01:Starting