Where can I obtain checksums?

[joaocfernandes]

Hello,

I have been googling, but I wasn't able to found a list of pgjdbc jars checksums to validate downloads? Does it exist somewhere?

[davecramer]

https://oss.sonatype.org/service/local/repositories/releases/content/org/postgresql/postgresql/42.5.1/

[vlsi]

In theory, we should better provide the checksums on project-specific website.

[vlsi]

So I believe the best "project-specific" we have is https://github.com/pgjdbc/pgjdbc/blob/master/KEYS which lists PGP keys that are used to sign the official releases.

It makes sense to:

1. Add the link to KEYS from the official download page (e.g. https://jdbc.postgresql.org/download/)
2. Add checksums for the official releases (e.g. side by side with download links or something like that)

[davecramer]

In theory, we should better provide the checksums on project-specific website.

agreed, let's create a chore

[joaocfernandes]

Thanks a lot!