ExifTool Forum

ExifTool => The "exiftool" Application => Topic started by: Songdog1 on March 08, 2015, 01:36:29 PM

Title: Digital Signature on ExifTool file
Post by: Songdog1 on March 08, 2015, 01:36:29 PM
Mr. Harvey:

Is it possible to put a digital signature on the ExifTool file and to post that signature so we can verify that the file we are downloading is the original file you are putting on the server and not a hacked one?
Title: Re: Digital Signature on ExifTool file
Post by: Phil Harvey on March 08, 2015, 03:41:52 PM
For this I would suggest doing an MD5 checksum.  You can add the checksum to the image using ExifTool, but this will require that it be removed again before verifying the checksum.

- Phil
Title: Re: Digital Signature on ExifTool file
Post by: StarGeek on March 08, 2015, 05:17:09 PM
I think Songdog1 means the executable, similar to what's talked about in this thread (https://exiftool.org/forum/index.php/topic,5998.0.html).
Title: Re: Digital Signature on ExifTool file
Post by: Phil Harvey on March 08, 2015, 05:31:16 PM
Oh, thanks StarGeek.  That makes more sense.

You can compare the release files against the shah and md5 checksums here:

https://exiftool.org/checksums.txt

- Phil
Title: Re: Digital Signature on ExifTool file
Post by: Songdog1 on March 12, 2015, 11:31:01 AM
Quote from: StarGeek on March 08, 2015, 05:17:09 PM
I think Songdog1 means the executable, similar to what's talked about in this thread (https://exiftool.org/forum/index.php/topic,5998.0.html).

StarGeek:

Yes, you described it perfectly.
Title: Re: Digital Signature on ExifTool file
Post by: Songdog1 on March 12, 2015, 11:31:48 AM
Quote from: Phil Harvey on March 08, 2015, 05:31:16 PM
Oh, thanks StarGeek.  That makes more sense.

You can compare the release files against the shah and md5 checksums here:

https://exiftool.org/checksums.txt

- Phil

Thank you. This was exactly what I was looking for.