commit 011e0d3d3da5263efa29b9a5963caa083f4c3ff5 Author: Georg Koppen gk@torproject.org Date: Wed Feb 21 10:15:54 2018 +0000

Bug 22612: Add script to hash signed bundles --- tools/hash_signed_bundles.sh | 50 ++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 50 insertions(+)

diff --git a/tools/hash_signed_bundles.sh b/tools/hash_signed_bundles.sh new file mode 100755 index 0000000..4354d47 --- /dev/null +++ b/tools/hash_signed_bundles.sh @@ -0,0 +1,50 @@ +#!/bin/sh + +# Copyright (c) 2018, The Tor Project, Inc. +# +# Redistribution and use in source and binary forms, with or without +# modification, are permitted provided that the following conditions are +# met: + +# * Redistributions of source code must retain the above copyright +# notice, this list of conditions and the following disclaimer. +# +# * Redistributions in binary form must reproduce the above +# copyright notice, this list of conditions and the following disclaimer +# in the documentation and/or other materials provided with the +# distribution. +# +# * Neither the names of the copyright owners nor the names of its +# contributors may be used to endorse or promote products derived from +# this software without specific prior written permission. +# +# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS +# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT +# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR +# A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT +# OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, +# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT +# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, +# DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY +# THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT +# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE +# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + +# Usage: +# 1) Change into the directory containing the files to be hashed +# 2) Run /path/to/hash_signed_bundles.sh + +export LC_ALL=C + +rm -f sha256sums-signed-build.txt sha256sums-signed-build.incrementals.txt +sha256sum `ls -1 | grep -v '.incremental.mar$' | grep -v '^sha256sums*' | \ + sort` > sha256sums-signed-build.txt + +if ls -1 | grep -q '.incremental.mar$' +then + sha256sum `ls -1 | grep '.incremental.mar$' | \ + sort` > sha256sums-signed-build.incrementals.txt +fi + +echo "Hashing the signed bundles done." +exit 0