Installing FileZilla

[doubledee]

I need to install FileZilla on my new cMBP, but when I go to the website, I can't find a checksum to verify that what I download is safe.

Considering that FileZilla is used to manage files on websites, I'm shocked they don't provide someone to verify the download is okay.

Any ideas what to do?

Sincerely,


Debbie

P.S. I've noticed a similar problem with the app "TextWrangler"...

 

[simsaladimbamba]

Do you absolutely need the checksum for a downloaded file, especially when the download comes from the OFFICIAL source of the application?

 

[maflynn]

P.S. I've noticed a similar problem with the app "TextWrangler"...

Most Mac Apps don't. If you're downloading from the developer's site the risks are pretty low. I'd also say the majority of mac users do not even care about that sort of thing. I know I don't

 

[prisstratton]

I need to install FileZilla on my new cMBP, but when I go to the website, I can't find a checksum to verify that what I download is safe.

Considering that FileZilla is used to manage files on websites, I'm shocked they don't provide someone to verify the download is okay.

Any ideas what to do?

Sincerely,


Debbie

P.S. I've noticed a similar problem with the app "TextWrangler"...

The checksum is available at the bottom of this page:

https://filezilla-project.org/download.php?show_all=1

 

[doubledee]

Do you absolutely need the checksum for a downloaded file, especially when the download comes from the OFFICIAL source of the application?

I don't know? Do I?

Lots of people seem to think that checking the CheckSum is a good idea.

I'm trying to turn over a new leaf and really up my approach to security...

Sincerely,


Debbie

----------

The checksum is available at the bottom of this page:

https://filezilla-project.org/download.php?show_all=1

When I click on that I get a pop up asking me to save a file.

I don't know what to do with that?!

I'm used to see a SHA-1 posted on the app maker's website, and then I go into Terminal and type...

openssl sha1 <path to download>

Sincerely,


Debbie

 

[prisstratton]

When I click on that I get a pop up asking me to save a file.

I don't know what to do with that?!

I'm used to see a SHA-1 posted on the app maker's website, and then I go into Terminal and type...

openssl sha1 <path to download>

Sincerely,


Debbie

The link I posted points you to the site where the FileZilla developers have made available a text file that contains the valid hashes for all of the different platforms (i.e. Mac, Windows, Linux etc.).

You have to run the hash check on your system, as follows:

openssl dgst -sha512 <path to file>

For your downloads directory this would be:

openssl dgst -sha512 /users/your_name/downloads/FileZilla_3.7.1.1_i686-apple-darwin9.app.tar.bz2

This will return a value:

7c3994e83ceec42f9ba83b4fa2dcd6a95b29d2945b073262223f0171841b91551b7026c61921d4f1c93ae05a356b39381af482369e093b420830964c466fc40b

Check this value against the one that is posted by the developers in the text file (I just cut and paste the value from terminal into the text file, it is very easy to spot any differences) if they match, then you are okay.

 

[doubledee]

Thanks for the response, but I think there is a little bit of disconnect...

The link I posted points you to the site where the FileZilla developers have made available a text file that contains the valid hashes for all of the different platforms (i.e. Mac, Windows, Linux etc.).

If I click on the link...

Checksums

FileZilla_3.7.1.1.sha512

Then I get a popup that says...

Opening FileZilla_3.7.1.1.sha512

You have chosen to open FileZilla_3.7.1.1.sha512

which is a: Binary File (1.2 KB)

from httP://superb-dca2.dll.sourceforge.net

Would you like to save this file?

Cancel | Save File

Now what am I supposed to do with that??

I have no clue what a .sha512 file extension is?!

You have to run the hash check on your system, as follows:

openssl dgst -sha512 <path to file>

If you are saying I run that against the FileZilla app I downloaded, I get that, except...

What is the dgst thing?


I am used to running something like...

openssl sha1 path/To/My/Downloaded/File/zip

Sincerely,


Debbie

 

[prisstratton]

As I mentioned the file that contains the hashes (FileZilla_3.7.1.1.sha512) is a TEXT file. Save it, open it with TextEdit and look for the appropriate hash for the file that you downloaded. In this case line #2 in the file.

The "dgst" is part of the command syntax for checking the file.

I do not know all of the "in's" and "out's" of using OPENSSL, I know enough to get done what I need.

If you wish to learn more about OPENSSL, look here:

http://www.openssl.org

Good Luck.

 

[doubledee]

As I mentioned the file that contains the hashes (FileZilla_3.7.1.1.sha512) is a TEXT file. Save it, open it with TextEdit and look for the appropriate hash for the file that you downloaded. In this case line #2 in the file.

The "dgst" is part of the command syntax for checking the file.

I do not know all of the "in's" and "out's" of using OPENSSL, I know enough to get done what I need.

If you wish to learn more about OPENSSL, look here:

http://www.openssl.org

Good Luck.

Okay.

Got it.

Thanks!!!


Debbie