Verifying 3.5.0.1 MSI file

[Mark Scarbrough]

Hi all,

Previous versions of the Shibboleth installer included a sha256 file that I was able to verify the download with using the certutil program that ships with windows. The latest release only has a gpg signature file. Would it be possible to also publish the sha256 file?

Or does anyone know a way to verify the gpg signature on windows (preferably without installing further utilities)? I need to write up some brief instructions re this advisory for our windows shib admins.

Thanks,
-Mark
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20250317/a06bf8e5/attachment.htm>