• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 396
  • Last Modified:

Apache HTTP Server - verify the integrity

Hi there,

  I am trying to install Apache Http server on my Windows XP environment. the instruction on Apache site mentions "It is essential that you verify the integrity of the downloaded files using the PGP or MD5 signatures.", I have no clue how to do this in windows. can someone give me a step by step instruction?

  Any help will be greatly appreciated.

  Thanks.
0
notaexpert
Asked:
notaexpert
  • 6
  • 2
1 Solution
 
callrsCommented:
Step by step instructions are at http://httpd.apache.org/download.cgi#verify
0
 
callrsCommented:
But you can skip that if you want...I did. If you trust that the file is uncorrupted.
0
 
callrsCommented:
1) Download md5 from:
http://www.fourmilab.ch/md5/  http://www.pc-tools.net/win32/freeware/console/ or http://www.slavasoft.com/fsum/

2) Open the zip file & extract to C:\md5

"It is essential that you verify the integrity of the downloaded files using the PGP or MD5 signatures."
OK, we'll use MD5 here. Now it says "Make sure you get these files from the main distribution directory, rather than from a mirror"

3) First two are optional, we'll just use the third file here (the md5 one):
http://www.apache.org/dist/httpd/KEYS
http://www.apache.org/dist/httpd/binaries/win32/apache_2.2.2-win32-x86-no_ssl.msi.asc
http://www.apache.org/dist/httpd/binaries/win32/apache_2.2.2-win32-x86-no_ssl.msi.md5

(be sure to save the md5 file into the same folder as the md5 program above, i.e. c:\md5)

4) Download the Win32 Binary (apache_2.2.2-win32-x86-no_ssl.msi) from a mirror:
http://www.apache.org/dyn/closer.cgi/httpd/binaries/win32/

5) Then
-Go to command prompt (Start, Run, cmd)
-Type this & press enter: cd c:\md5
-Type this & press enter: md5 -csignature apache_2.2.2-win32-x86-no_ssl.msi.md5


If you want, you can do steps 3 to 5 for the  apache_2.2.2-win32-x86-symbols.zip.md5   & apache_2.2.2-win32-x86-symbols.zip files.

Cheers.
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
callrsCommented:
Corrections! It's a bit more complex that I thought. But I tested the solution below:

4)
Download that file from step 4 into this folder: c:\md5
Can download to other folder, but this will make things a bit easier.

5) Forget step 5 above, replace with this:
Open up notepad (Start, Run, notepad), and copy the lines below into the new file, and save the file as "c:\md5\testapac.bat"
BUT YOU MUST click the apache_2.2.2-win32-x86-no_ssl.msi.md5 link above, copy 32-byte code that appears, and replace <copy your code here> below with that code (make sure to put the code after the "-c", with no space and no "<" or ">")
:: Start batch file
@echo off
::md5 -cd372bb76e336c497d9a90248f42581cc apache_2.2.2-win32-x86-no_ssl.msi
md5 -c<copy your code here> apache_2.2.2-win32-x86-no_ssl.msi
if errorlevel 2 goto :ERROR
if errorlevel 1 goto :NOMATCH
if errorlevel 0 goto :MATCH
:ERROR
echo Error: Could not process
goto :EOF
:NOMATCH
echo Signitures do NOT match!
goto :EOF
:MATCH
echo Signatures MATCH :)
:EOF
:: End batch file


6)
- Go to command prompt (Start, Run, cmd)
- Type & hit enter: cd c:\md5
- Type & hit enter: testapac

7) It will tell you whether the signatures match or not.

: )
I can make it a bit easier, but this has taken too much of my time & would take more to simplify it. It will work as I've given it though.
0
 
callrsCommented:
OK here's how to make it easier (why didn't apache say this in the first place? LOL): Just get a Windows version of an MD5 checker, such as:
http://www.softpedia.com/get/System/File-Management/MD5-Checker.shtml     Download MD5 Checker 2.20 - MD5 Checker - free utility to verify downloads with an MD5 checksum - Softpedia

With that, you don't need to do steps 5 & 6 -- With the checker you just select the file, and it computes the md5 hash. You can then compare that hash value with the value in the apache_2.2.2-win32-x86-no_ssl.msi.md5 file.  And you're done if the values match.
0
 
notaexpertAuthor Commented:
Thanks callrs for all your input, especially all the time you spent in order to help me out. I am going to try what you suggested later (I am outside my office today).

I'll let you know the result.

Thanks a lot!!!
0
 
notaexpertAuthor Commented:
callrs, it works perfectly. Thanks for your help.
0
 
callrsCommented:
Welcome. But to really thank me, be kind to the earth that made me possible lol: compost, have organic yard, inform yourself ...
 
0

Featured Post

New feature and membership benefit!

New feature! Upgrade and increase expert visibility of your issues with Priority Questions.

  • 6
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now