Link to home
Start Free TrialLog in
Avatar of notaexpert
notaexpert

asked on

Apache HTTP Server - verify the integrity

Hi there,

  I am trying to install Apache Http server on my Windows XP environment. the instruction on Apache site mentions "It is essential that you verify the integrity of the downloaded files using the PGP or MD5 signatures.", I have no clue how to do this in windows. can someone give me a step by step instruction?

  Any help will be greatly appreciated.

  Thanks.
Avatar of callrs
callrs

Step by step instructions are at http://httpd.apache.org/download.cgi#verify
But you can skip that if you want...I did. If you trust that the file is uncorrupted.
1) Download md5 from:
http://www.fourmilab.ch/md5/  http://www.pc-tools.net/win32/freeware/console/ or http://www.slavasoft.com/fsum/

2) Open the zip file & extract to C:\md5

"It is essential that you verify the integrity of the downloaded files using the PGP or MD5 signatures."
OK, we'll use MD5 here. Now it says "Make sure you get these files from the main distribution directory, rather than from a mirror"

3) First two are optional, we'll just use the third file here (the md5 one):
http://www.apache.org/dist/httpd/KEYS
http://www.apache.org/dist/httpd/binaries/win32/apache_2.2.2-win32-x86-no_ssl.msi.asc
http://www.apache.org/dist/httpd/binaries/win32/apache_2.2.2-win32-x86-no_ssl.msi.md5

(be sure to save the md5 file into the same folder as the md5 program above, i.e. c:\md5)

4) Download the Win32 Binary (apache_2.2.2-win32-x86-no_ssl.msi) from a mirror:
http://www.apache.org/dyn/closer.cgi/httpd/binaries/win32/

5) Then
-Go to command prompt (Start, Run, cmd)
-Type this & press enter: cd c:\md5
-Type this & press enter: md5 -csignature apache_2.2.2-win32-x86-no_ssl.msi.md5


If you want, you can do steps 3 to 5 for the  apache_2.2.2-win32-x86-symbols.zip.md5   & apache_2.2.2-win32-x86-symbols.zip files.

Cheers.
Corrections! It's a bit more complex that I thought. But I tested the solution below:

4)
Download that file from step 4 into this folder: c:\md5
Can download to other folder, but this will make things a bit easier.

5) Forget step 5 above, replace with this:
Open up notepad (Start, Run, notepad), and copy the lines below into the new file, and save the file as "c:\md5\testapac.bat"
BUT YOU MUST click the apache_2.2.2-win32-x86-no_ssl.msi.md5 link above, copy 32-byte code that appears, and replace <copy your code here> below with that code (make sure to put the code after the "-c", with no space and no "<" or ">")
:: Start batch file
@echo off
::md5 -cd372bb76e336c497d9a90248f42581cc apache_2.2.2-win32-x86-no_ssl.msi
md5 -c<copy your code here> apache_2.2.2-win32-x86-no_ssl.msi
if errorlevel 2 goto :ERROR
if errorlevel 1 goto :NOMATCH
if errorlevel 0 goto :MATCH
:ERROR
echo Error: Could not process
goto :EOF
:NOMATCH
echo Signitures do NOT match!
goto :EOF
:MATCH
echo Signatures MATCH :)
:EOF
:: End batch file


6)
- Go to command prompt (Start, Run, cmd)
- Type & hit enter: cd c:\md5
- Type & hit enter: testapac

7) It will tell you whether the signatures match or not.

: )
I can make it a bit easier, but this has taken too much of my time & would take more to simplify it. It will work as I've given it though.
ASKER CERTIFIED SOLUTION
Avatar of callrs
callrs

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of notaexpert

ASKER

Thanks callrs for all your input, especially all the time you spent in order to help me out. I am going to try what you suggested later (I am outside my office today).

I'll let you know the result.

Thanks a lot!!!
callrs, it works perfectly. Thanks for your help.
Welcome. But to really thank me, be kind to the earth that made me possible lol: compost, have organic yard, inform yourself ...