tz-latest checksum
I'm looking into writing a python script which retrieves the latest timezone database from the FTP server, but I'm wondering if there's anywhere that a checksum of the tz-latest files can be found anywhere. At the moment, we manually specify the latest version of the database, and calculate the sha512 checksum whenever it is updated. I see that the GPG signature is available, but I would very much like to avoid adding any dependencies to the library. Is there anywhere that I retrieve the checksum for the latest tzdata file using one of the hashes supported by hashlib? (SHA1, SHA256, SHA384, SHA512 or MD5) Of course this defeats the implied MITM protection that retrieving a "known good" or signed checksum provides, but it at least retains the checksum / corrupted file protection. Thanks!
Paul G wrote:
I see that the GPG signature is available, but I would very much like to avoid adding any dependencies to the library.
I just now ran the commands: wget --recursive --level=2 -R asc,sign ftp://ftp.iana.org/tz/releases cd ftp.iana.org/tz/releases sha512sum * and got the attached output, for what it's worth.
participants (2)
-
Paul Eggert -
Paul G