Page MenuHome GnuPG
Files F35313430

No OneTemporary
Actions

View Options

diff --git a/packages/download.sh b/packages/download.sh
index ddbb9011..da15cde4 100755
--- a/packages/download.sh
+++ b/packages/download.sh
@@ -1,343 +1,339 @@
#!/bin/sh
# download.sh - Download source and binary packages for GPG4Win.
# Copyright (C) 2005, 2007 g10 Code GmbH
#
# This file is part of Gpg4win.
#
# Gpg4win is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# Gpg4win is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA
# Syntax of the packages.current file:
#
# If the first non whitespace character of a line is #, the line is
# considered a comment. If the first word of a line is "server", the
# rest of the line will be taken as the base URL for following file
# commands. If the first word of a line is "file" the rest of the
# line will be appended to the current base URL (with a / as
# delimiter). Checksums are sha256 sums.
#
# A simple conditionals mechanism is impleted using the keywords if
# and fi with the operators = and !=.
#
# Example:
#
# # GnuPG stuff.
# server ftp://ftp.gnupg.org/gcrypt
#
# file gnupg/gnupg-1.4.2.tar.gz
# chk 1e92b39ef4f4cdf3b1849b6f824dd8f160276aa5c9718be35f8a7bd190bf6154
#
usage()
{
cat <<EOF
Usage: $0 [OPTIONS]
Options:
[--force] Download packages even if they exist.
[--quiet]
[--ipv4]
[--ipv6]
[--dry-run] Do not download - just check
[--clean] Do not download but remove downloaded files.
[--update] Remove old files with the same name.
[--gnupg22] Build using GnuPG 2.2
- [--gnupg24] Build using GnuPG 2.4
[--gnupg26] Build using GnuPG 2.6 (default)
EOF
exit $1
}
force=no
quiet=no
ipvx=
clean=no
dryrun=no
update=no
gnupgtag=gnupg26
#keep_list=no
#sig_check=yes
while [ $# -gt 0 ]; do
case "$1" in
--*=*)
optarg=`echo "$1" | sed 's/[-_a-zA-Z0-9]*=//'`
;;
*)
optarg=""
;;
esac
case $1 in
--force)
force=yes
;;
--keep-list)
# Now a dummy
# keep_list=yes
;;
--no-sig-check)
# Now a dummy
sig_check=no
;;
--quiet)
quiet=yes
;;
--ipv4)
ipvx="-4"
;;
--ipv6)
ipvx="-6"
;;
--clean)
clean=yes
;;
--dry-run|-n)
dryrun=yes
;;
--update|-u)
update=yes
;;
--gnupg22)
gnupgtag=gnupg22
;;
- --gnupg24)
- gnupgtag=gnupg24
- ;;
--gnupg26)
gnupgtag=gnupg26
;;
*)
usage 1 1>&2
;;
esac
shift
done
WGET="wget $ipvx"
# We used to download the packages.current list but it turned out that
# this is too problematic: As there is no history of these files it is
# not possible to build and older version of gpg4win using the online
# version of the list. Thus we keep the list now with the installer
# and in case a package update is required we will post an updated
# list to the mailing list.
#
#url="http://www.gpg4win.org"
#if [ "$keep_list" = "no" ]; then
# echo "downloading packages list from \`$url'."
# if ! ${WGET} -N -q $url/packages.current{,.sig} ; then
# echo "download of packages list failed." >&2
# exit 1
# fi
#fi
#
#if [ "$sig_ckeck" = yes ]; then
# if ! gpgv --keyring ./packages.keys packages.current.sig packages.current
# then
# echo "list of packages is not usable." >&2
# exit 1
# fi
#fi
packages="packages.list"
actually_downloaded=
lnr=0
name=
condfalse=
[ $clean = yes ] && rm -f '.#download.v*'
[ -f '.#download.failed' ] && rm '.#download.failed'
[ -f '.#download.worked' ] && rm '.#download.worked'
[ -f '.#download.current_packages' ] && rm '.#download.current_packages'
[ -f '.#download.stale_packages' ] && rm '.#download.stale_packages'
cat $packages | \
while read key value valuetwo valuethree; do
: $(( lnr = lnr + 1 ))/read
[ -z "$key" ] && continue
if [ "$key" = "fi" ]; then
condfalse=
key="#"
fi
[ -n "$condfalse" ] && continue
case "$key" in
\#*)
;;
"if")
if [ "$value" = "gnupg" -a "$valuetwo" = "=" ]; then
if [ "$valuethree" != "$gnupgtag" ]; then
condfalse=yes
fi
elif [ "$value" = "gnupg" -a "$valuetwo" = "!=" ]; then
if [ "$valuethree" = "$gnupgtag" ]; then
condfalse=yes
fi
fi
;;
server)
server="$value"
name=
;;
name)
if [ -z "$value" ]; then
echo "syntax error in name statement, line $lnr" >&2
exit 1
fi
name="$value"
[ $quiet = no ] && echo "using name \`$name'"
;;
file)
if [ -z "$value" ]; then
echo "syntax error in file statement, line $lnr" >&2
exit 1
fi
if [ -z "$server" ]; then
echo "no server location for file \`$value', line $lnr" >&2
exit 1
fi
url="$server/$value"
if [ -z "$name" ]; then
name=`basename "$value"`
fi
echo "$name" >> '.#download.current_packages'
if [ "$clean" = "yes" ]; then
[ $quiet = no ] && echo "Removing: $name"
rm -f $name
elif [ -s "$name" -a "$force" = "no" ]; then
[ $quiet = no ] && echo "package \`$url' ... already exists"
elif [ $dryrun = yes ]; then
echo "skipping download of \`$url' ... --dry-run active"
else
if [ "$update" = "yes" ]; then
pkg=$(echo "$name" | cut -d- -f1)
pkg2=$(echo "$name" | cut -d- -f2)
if [ "$pkg2" = "w32" -o "$pkg2" = "msi" -o "$pkg2" = "icons" ]; then
pkg=$(echo $pkg-$pkg2);
fi
pkgsuffix=$(echo "$name" | rev | cut -d. -f1 | rev)
if [ -n "$pkg" -a -n "$pkgsuffix" ]; then
if ls ${pkg}*.$pkgsuffix > /dev/null 2>&1; then
[ $quiet = no ] && echo "Removing "${pkg}*.$pkgsuffix";"
rm ${pkg}*.$pkgsuffix;
fi
fi
fi
echo -n "downloading \`$url' ..."
if ${WGET} -c -q "$url" -O "$name" ; then
if [ $(stat -c'%s' "$name" 2>/dev/null || echo 0) -eq 0 ]; then
echo " FAILED (line $lnr)"
echo "line $lnr: $url has zero length" >> '.#download.failed'
else
echo " okay"
echo "$url" >> '.#download.worked'
fi
else
echo " FAILED (line $lnr)"
echo "line $lnr: downloading $url failed" >> '.#download.failed'
fi
fi
;;
link)
if [ -z "$value" ]; then
echo "syntax error in file statement, line $lnr" >&2
exit 1
fi
if [ -z "$name" ]; then
echo "no name for link in line $lnr" >&2
exit 1
fi
echo "$value" >> '.#download.current_packages'
if [ $clean = yes ]; then
[ $quiet = no ] && echo "Removing link: $value"
rm -f $value
elif [ -f "$value" -a "$force" = "no" ]; then
[ $quiet = no ] && echo "package \`$value' ... already exists"
else
if [ "$update" = "yes" ]; then
pkg=$(echo "$value" | cut -d- -f1)
pkg2=$(echo "$value" | cut -d- -f2)
if [ "$pkg2" = "w32" -o "$pkg2" = "msi" -o "$pkg2" = "icons" ]; then
pkg=$(echo $pkg-$pkg2);
fi
pkgsuffix=$(echo "$name" | rev | cut -d. -f1 | rev)
if [ -n "$pkg" -a -n "$pkgsuffix" ]; then
if ls ${pkg}*.$pkgsuffix > /dev/null 2>&1; then
[ $quiet = no ] && echo "Removing link "${pkg}*.$pkgsuffix";"
rm ${pkg}*.$pkgsuffix;
fi
fi
fi
echo -n "linking \`$value' to \`$name' ..."
if ln -f "$name" "$value"; then
echo " okay"
else
echo " FAILED (line $lnr)"
echo "line $lnr: linking $value failed" >> '.#download.failed'
fi
fi
;;
chk)
if [ $clean = yes ]; then
name=
continue
fi
if [ -z "$value" ]; then
echo "syntax error in chk statement, line $lnr" >&2
exit 1
fi
if [ -z "$name" ]; then
echo "no file name for chk statement, line $lnr" >&2
exit 1
fi
[ $quiet = no ] && echo -n "checking \`$name' ..."
if echo "$value *$name" | sha256sum -c --status ; then
[ $quiet = no ] && echo " okay"
else
[ $quiet = no ] && echo " FAILED (line $lnr)"
[ $quiet = no ] || echo "checking \`$name' FAILED (line $lnr)"
echo "line $lnr: checking $name failed" >> '.#download.failed'
fi
name=
;;
*)
echo "syntax error in \`$packages', line $lnr." >&2
exit 1
esac
done
[ $dryrun = yes ] && echo "Note: option --dry-run was used" >&2
if [ -f '.#download.worked' ]; then
echo "Actually downloaded files:" >&2
cat '.#download.worked' >&2
fi
if [ -f '.#download.failed' ]; then
cat '.#download.failed' >&2
rm '.#download.failed'
echo "some files failed to download or checksums are not matching" >&2
exit 1
fi
# check for stale packages
for p in $(ls *.xz *.gz *.bz2 *.wixlib *.exe *.zip); do
if ! grep -q $p '.#download.current_packages'; then
echo "rm $p" >> '.#download.stale_packages'
fi
done
if [ -f '.#download.stale_packages' ]; then
echo "Warning: Stale packages were found. Remove them with" >&2
cat '.#download.stale_packages' >&2
fi
diff --git a/packages/packages.list b/packages/packages.list
index 65dc5137..dcf2685c 100644
--- a/packages/packages.list
+++ b/packages/packages.list
@@ -1,858 +1,831 @@
# packages.list - list of packages for use with gpg4win -*- sh -*-
#
# The download script processes the statements here to
# actually download the packages. The syntax is trivial:
#
# If the first non whitespace character of a line is #, the line is
# considered a comment. If the first word of a line is "server", the
# rest of the line will be taken as the base URL for following file
# commands. If the first word of a line is "file" the rest of the
# line will be appended to the current base URL (with a / as
# delimiter). The statement "chk" is followed by the SHA256 checksum of
# the last file.
#
# Third party libraries
#
server https://ftp.gnu.org/pub/gnu
# last-changed: 2024-07-16
# by: ah
# verified: Sig 9001 B85A F9E1 B83D F1BD A942 F5BE 8B26 7C6A 406D
file libiconv/libiconv-1.17.tar.gz
chk 8f74213b56238c85a50a5329f77e06198771e70dd9a739779f4c02f65d971313
# last-changed: 2024-07-16
# by: ah
# verified: Sig 9001 B85A F9E1 B83D F1BD A942 F5BE 8B26 7C6A 406D
file gettext/gettext-0.22.5.tar.xz
chk fe10c37353213d78a5b83d48af231e005c4da84db5ce88037d88355938259640
# Required by XCB for qtbase and not available in all repos
# last-changed: 2024-07-17
# by: ah
# verified: Mutltiple sources for checksum
server https://xcb.freedesktop.org/dist/
file xcb-util-cursor-0.1.4.tar.xz
chk 28dcfe90bcab7b3561abe0dd58eb6832aa9cc77cfe42fcdfa4ebe20d605231fb
# last-changed: 2025-12-10
# by wk
# verified: Downloaded tar.xz from sf which does not provide a
# checksum. Also downloaded the tar.gz version and compared
# to the checkums given at
# https://tracker.debian.org/news/1697075/
# accepted-libpng16-1653-1-source-into-unstable/
# and checked that both extracted trees are identical.
server https://sourceforge.net
file projects/libpng/files/libpng16/1.6.53/libpng-1.6.53.tar.xz
chk 1d3fb8ccc2932d04aa3663e22ef5ef490244370f4e568d7850165068778d98d4
# last-changed: 2023-05-03
# by ah
# verified: verification of checksum from multiple sources
server https://www.ijg.org
name jpeg-9e.tar.gz
file files/jpegsrc.v9e.tar.gz
chk 4077d6a6a75aeb01884f708919d25934c93305e49f7e3f36db9129320e6f4f3d
# last-changed: 2026-01-28
# by ik
# verified: checked signature tiff-4.7.1.tar.xz.sig
# gpg: Signature made Fr 12 Sep 2025 13:25:03 CEST
# gpg: using RSA key B1FA7D81EEB8E66399178B9733EBBFC47B3DD87D
# gpg: Good signature from "Even Rouault <even.rouault@spatialys.com>" [unknown]
server https://download.osgeo.org
file libtiff/tiff-4.7.1.tar.xz
chk b92017489bdc1db3a4c97191aa4b75366673cb746de0dce5d7a749d5954681ba
server https://github.com
# last-changed: 2023-05-03
# by ah
# verified: verification of checksum from multiple sources e.g. homebrew
name openjpeg-2.5.0.tar.gz
file uclouvain/openjpeg/archive/refs/tags/v2.5.0.tar.gz
chk 0333806d6adecc6f7a91243b2b839ff4d2053823634d4f6ed7a59bc87409122a
# last-changed: 2023-07-31
# by ah
# verified: verification of checksum from multiple sources e.g. homebrew
file libical/libical/releases/download/v3.0.16/libical-3.0.16.tar.gz
chk b44705dd71ca4538c86fb16248483ab4b48978524fb1da5097bd76aa2e0f0c33
# last-changed: 2023-09-29
# by ah
# verified: SIG 45F68D54BBE23FB3039B46E59766E084FB0F43D8
file PCRE2Project/pcre2/releases/download/pcre2-10.42/pcre2-10.42.tar.bz2
chk 8d36cd8cb6ea2a4c2bb358ff6411b0c788633a2a45dabbf1aeb4b701d1b5e840
# disabled by wk 2025-01-22 because prison is also disabled.
## libqrencode for prison
## last-changed: 2025-08-15
## by SSV
## verified: Github autogenerated tarball. They might also change from time to time
#name libqrencode-4.1.1.tar.gz
#file fukuchi/libqrencode/archive/refs/tags/v4.1.1.tar.gz
#chk 5385bc1b8c2f20f3b91d258bf8ccc8cf62023935df2d2676b5b67049f31a049c
# libzstd
# last-changed: 2024-03-28
# by: ah
# verified: SIG 4EF4AC63455FC9F4545D9B7DEF8FE99528B52FFD
server https://github.com/facebook/zstd/releases/download/
file v1.5.6/zstd-1.5.6.tar.gz
chk 8c29e06cf42aacc1eafc4077ae2ec6c6fcb96a626157e0593d5e82a34fd403c1
#
# GIMP stuff for W32
#
server http://ftp.gnome.org/pub/gnome/binaries/win32/dependencies
# checked: 2012-03-28 wk - Not updated - not a security problem
name pkgconfig-0.23.tar.gz
file pkg-config-0.23.tar.gz
chk 08a0e072d6a05419a58124db864f0685e6ac96e71b2875bf15ac12714e983b53
name pkgconfig-0.23.zip
file pkg-config_0.23-3_win32.zip
chk 677d6055494e24cad6c49eab33eee618ddc6ed65da827c8b5b7da761b4063278
server https://download.savannah.gnu.org/releases/
# last-changed: 2025-02-18
# by: ah
# verified: SIG E30674707856409FF1948010BE6C3AAC63AD8E3F
file freetype/freetype-2.13.3.tar.xz
chk 0550350666d427c74daeb85d5ac7bb353acba5f76956395995311a9c6f063289
#
# SQLite
#
server https://www.sqlite.org
# last changed: 2021-09-20
# by: ik
# verified: SHA1 checksum on https://web.archive.org/web/20190228201545/https://www.sqlite.org/download.html
name sqlite-3.27.2.tar.gz
file 2019/sqlite-autoconf-3270200.tar.gz
chk 50c39e85ea28b5ecfdb3f9e860afe9ba606381e21836b2849efca6a0bfe6ef6e
#
# GnuPG et al.
#
# All tarballs from this server are verified with an openpgp
# signature made by "Werner Koch (dist sig)" or one of the other
# gnupg main contributors.
# Server changed from ftp to https by wk 2021-09-22
server https://gnupg.org/ftp/gcrypt
# last-changed: 2022-04-07
# by: wk
# verified: swdb
file zlib/zlib-1.2.12.tar.gz
chk 91844808532e5ce316b3c010929493c0244f3d37593afd6de04f71821d5136d9
# Stripped down version of BZIP2
# (full source at http://bzip.org)
# checked: 2014-07-16 ah
file bzip2/bzip2-1.0.6-g10.tar.gz
chk c2a9b3aec1a38d34b66106116a39f64b01d84f475fef75c40ea0bda0ea67ed07
# last changed 2025-12-12
# by wk
# verified: build-tree
file libgpg-error/libgpg-error-1.58.tar.bz2
chk f943aea9a830a8bd938e5124b579efaece24a3225ff4c3d27611a80ce1260c27
# last-changed: 2025-11-25
# by: wk
# verified: swdb
file libassuan/libassuan-3.0.2.tar.bz2
chk d2931cdad266e633510f9970e1a2f346055e351bb19f9b78912475b8074c36f6
# last changed 2025-02-04
# by ik
# verified: swdb
file npth/npth-1.8.tar.bz2
chk 8bd24b4f23a3065d6e5b26e98aba9ce783ea4fd781069c1b35d149694e90ca3e
# last changed 2025-02-04
# by ik
# verified: swdb
file libksba/libksba-1.6.7.tar.bz2
chk cf72510b8ebb4eb6693eef765749d83677a03c79291a311040a5bfd79baab763
# last changed 2024-01-12
# by wk
# verified: buildtree
file ntbtls/ntbtls-0.3.2.tar.bz2
chk bdfcb99024acec9c6c4b998ad63bb3921df4cfee4a772ad6c0ca324dbbf2b07c
#name gnupg-msi-2.3.1-beta18-20210420-src.tar.xz
#file binary/gnupg-w32-2.3.1_20210420.tar.xz
#chk e1a2dc705c940938b7bf7a17f521a41b1ef14139acd8860b2fd59aed2750aa3b
#name gnupg-msi-2.3.1-20210420-bin.wixlib
#file binary/gnupg-w32-2.3.1_20210420.wixlib
#chk 133817a4c4d11996956676c5c200222839ee5dc16e9476bd682d4e68b33ef73e
# pinentry
# last changed: 2025-07-28
# by: wk
# verified: buildtree
file pinentry/pinentry-1.3.2.tar.bz2
chk 8e986ed88561b4da6e9efe0c54fa4ca8923035c99264df0b0464497c5fb94e9e
# GpgOL
# last-changed: 2026-01-29
# by: wk
# verified: buildtree
file gpgol/gpgol-2.7.1.tar.bz2
chk 4afc3b0418e11508456cc8866cdff6a383c91506073765c7068bc0274d5202a8
#
# GpgEX
#
# last-changed: 2025-12-16
# by: wk
# verified: build-tree
file gpgex/gpgex-1.1.0.tar.bz2
chk c0e7869688c5654c00a10c22334be86be9e6485ab4822c114499ef73566bca21
#
# GnuPG utilities
#
server http://www.jabberwocky.com/software/paperkey
# last-changed: 2017-12-05
# by: ah
# verified: SIG 7D92 FD31 3AB6 F373 4CC5 9CA1 DB69 8D71 9924 2560
file paperkey-1.5.tar.gz
chk c4737943083ce92e41faf13c27a9d608105b6285c0840dfb684a7ee294142ddf
#
# Kleopatra and dependencies
#
server https://download.qt.io/archive/qt/
# qtbase
# last changed: 2025-12-02
# by: sune
# verified: mirror sha256sum (created by gen-qt.sh)"
name qtbase-6.10.1.tar.xz
file 6.10/6.10.1/submodules/qtbase-everywhere-src-6.10.1.tar.xz
chk 5a6226f7e23db51fdc3223121eba53f3f5447cf0cc4d6cb82a3a2df7a65d265d
# qttools
# last changed: 2025-12-02
# by: sune
# verified: mirror sha256sum (created by gen-qt.sh)"
name qttools-6.10.1.tar.xz
file 6.10/6.10.1/submodules/qttools-everywhere-src-6.10.1.tar.xz
chk 8148408380ffea03101a26305c812b612ea30dbc07121e58707601522404d49b
# qtsvg
# last changed: 2025-12-02
# by: sune
# verified: mirror sha256sum (created by gen-qt.sh)"
name qtsvg-6.10.1.tar.xz
file 6.10/6.10.1/submodules/qtsvg-everywhere-src-6.10.1.tar.xz
chk c02f355a58f3bbcf404a628bf488b6aeb2d84a94c269afdb86f6e529343ab01f
# qttranslations
# last changed: 2025-12-02
# by: sune
# verified: mirror sha256sum (created by gen-qt.sh)"
name qttranslations-6.10.1.tar.xz
file 6.10/6.10.1/submodules/qttranslations-everywhere-src-6.10.1.tar.xz
chk 8e49a2df88a12c376a479ae7bd272a91cf57ebb4e7c0cf7341b3565df99d2314
# qthttpserver
# last changed: 2025-12-02
# by: sune
# verified: mirror sha256sum (created by gen-qt.sh)"
name qthttpserver-6.10.1.tar.xz
file 6.10/6.10.1/submodules/qthttpserver-everywhere-src-6.10.1.tar.xz
chk a26c8d96d34bb4d4e2455e2c5df6e684aafb530927763eab84794ef71944e93b
# qtwebsockets
# last changed: 2025-12-02
# by: sune
# verified: mirror sha256sum (created by gen-qt.sh)"
name qtwebsockets-6.10.1.tar.xz
file 6.10/6.10.1/submodules/qtwebsockets-everywhere-src-6.10.1.tar.xz
chk 272ac7e94418e2b13b3384d73ba89dbd6b746d7661b44dce906f8bfc0795bd01
# qtwayland
# last changed: 2026-01-27
# by: ik
# verified: sha256 in *.mirrorlist file
name qtwayland-6.10.1.tar.xz
file 6.10/6.10.1/submodules/qtwayland-everywhere-src-6.10.1.tar.xz
chk 49bf6db800227a6b2c971f4c5d03dd1e81297e7ffb296ce4a96437304f27cb13
# wayland-protocols
# last changed: 2025-02-14
# by: carl
# verified: Sig: 8307C0A224BABDA1BABD0EB9A6EEEC9E0136164A
server https://gitlab.freedesktop.org/wayland/wayland-protocols/-/releases/
file 1.40/downloads/wayland-protocols-1.40.tar.xz
chk b21711793247c2c42763914392dfa9fcb9e3728ca4b4aa110adb8d915fc00689
# plasma-wayland-protocols
# last changed: 2025-02-14
# by: carl
# verified: Sig: E0A3EB202F8E57528E13E72FD7574483BB57B18D
server https://download.kde.org/stable/
file plasma-wayland-protocols/plasma-wayland-protocols-1.16.0.tar.xz
chk da3fbbe3fa5603f9dc9aabe948a6fc8c3b451edd1958138628e96c83649c1f16
# KDE Frameworks generated by gen-frameworks.sh
# When outdated activate this link:
#server https://download.kde.org/Attic/frameworks/
#server https://download.kde.org/stable/frameworks
server https://download.kde.org/stable/frameworks
##### Paste Here #####
# extra-cmake-modules
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/extra-cmake-modules-6.20.0.tar.xz
chk 3711de8572db5da618efe3f28cc094ca25a1abb0bddffc63dced12c4f8caae5f
# kauth
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/kauth-6.20.0.tar.xz
chk a918455f42e169fa55e965e407588c22cb18beb5529dab321d45acafdb7bd652
# kconfig
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/kconfig-6.20.0.tar.xz
chk daecf4989af9958144139e4918c22cd05b5a96527c51d737eae7c57718167d15
# ki18n
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/ki18n-6.20.0.tar.xz
chk f29c805137af9cee6abab424b380fea964a59b089f90fb909601d9fc78df5f73
# kwidgetsaddons
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/kwidgetsaddons-6.20.0.tar.xz
chk 39974b85cdffd8c6d6e0a5c0684927a21e071c1e63d7cce3888331f0169a4837
# kcompletion
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/kcompletion-6.20.0.tar.xz
chk 3b270003b661db894f50e9f90fdddd309c3ea97010e363bc551f752db6efcecc
# kwindowsystem
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/kwindowsystem-6.20.0.tar.xz
chk 836be005df3c8cfc81d9ca199f19e36ba0df515d69e7d8b06343465412f6f477
# kcoreaddons
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/kcoreaddons-6.20.0.tar.xz
chk c1d45587616df5eaa3667a028b1f7f909c9c7230ac42d62da69cfb2ac46cd505
# kcodecs
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/kcodecs-6.20.0.tar.xz
chk 15920b9a859341b13831e6ed49baceea2e728c796fdd082128e51f8e127ff3a0
# kconfigwidgets
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/kconfigwidgets-6.20.0.tar.xz
chk 5c5e8dc7e986d85c3602b8a52b8d8909f91e7433ecad8037099491250f5f4e36
# kdbusaddons
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/kdbusaddons-6.20.0.tar.xz
chk 5db2f6b7235238070224ee8a5225f41ffdb3249d558a81a7c06a8e54d67729f7
# kxmlgui
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/kxmlgui-6.20.0.tar.xz
chk a16fd3734112914ef50ed2666a16905d87e67954bc368725ccb1d5b2edc8f8f1
# kguiaddons
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/kguiaddons-6.20.0.tar.xz
chk 33caf5ae46f1a6214f56596180e0c6ccb4af2cce0dcae060ae4fb7078260a476
# kitemviews
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/kitemviews-6.20.0.tar.xz
chk 63f6d64780d3eb1bfdd2f2f9036026a2cdc163b676168c29c2797544f9ad6305
# kitemmodels
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/kitemmodels-6.20.0.tar.xz
chk 45b6cd5478fe35f0966a75e3cc554a5db8418ac7d6387745a0070f39caf921a9
# kcolorscheme
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/kcolorscheme-6.20.0.tar.xz
chk 1505acc69b2cc1be9ad325a70ab9669bb8d316fc5d601ccf4032be22fab8c0c2
# kiconthemes
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/kiconthemes-6.20.0.tar.xz
chk 61b906051cd66db1dd259ec76d08885d3fe749e0d3947aea749021d2c96537a5
# karchive
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/karchive-6.20.0.tar.xz
chk f6a508d537d283e2a106e848a939e971cdf1a059779825e4482609aa981ffadd
# kcrash
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/kcrash-6.20.0.tar.xz
chk 1f42e9c54ead9f2d81b3ec5eacf55ab6ff4dd1c3a0721c68f3ab39ed46f35973
# kio
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/kio-6.20.0.tar.xz
chk 7e67d471fc10b7df3d76e6ce859480be5d6e675d316592e7a8419b97f01bd649
# kbookmarks
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/kbookmarks-6.20.0.tar.xz
chk 3967d390155e7183dd5de0087aa4bb12264958331ac18a1f8c405a5edbdc1a14
# kservice
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/kservice-6.20.0.tar.xz
chk c33a5bcd2ce154e275ef9445901a2813c24943e24eaf2382d24865717892353c
# solid
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/solid-6.20.0.tar.xz
chk 0328381845a11cfcfa8c18c8d60c9df7b85a07bcd7b1bd36b71c7eb3cc3492d6
# kjobwidgets
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/kjobwidgets-6.20.0.tar.xz
chk 393b6eb6b35d680d48a5c7b09359668bddc1ed89d4fa70b8a8a81fb2d841ce7a
# threadweaver
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/threadweaver-6.20.0.tar.xz
chk 9313f25a2ea6e2431d34e0b00f68dad6881849c34f1e40515a539a70dd6fbb19
# kparts
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/kparts-6.20.0.tar.xz
chk 9e71e3d20c9525f66533dd7a5846f0d982eefdd7425bfbadecd6a17908ebd709
# ktextwidgets
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/ktextwidgets-6.20.0.tar.xz
chk 781e7fad5720de7f31380b2c4a458bc2875940449ed9168b48c60d474b6df220
# sonnet
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/sonnet-6.20.0.tar.xz
chk 356cddaf7cf2aabcaf850314bb248fa56a15b8285fea74d8f3a7c7e4dec2a83a
# kcalendarcore
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/kcalendarcore-6.20.0.tar.xz
chk 5f61027b34510d0de2f2b151c279b000aa17e1c34906ff05e0f0086eed2f3785
# Disabled because gpgpass is also disabled (wk 2024-11-27)
# prison
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
#file 6.20/prison-6.20.0.tar.xz
#chk 36ec6f82ecc3c06618d455cc1698ab11754d642fab3f1b850a7cf01ce11b3d1f
# kstatusnotifieritem
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/kstatusnotifieritem-6.20.0.tar.xz
chk db0edb928b15708487ea8ad007db4bcf3949332698cc78b4ed75128bea1b2fa6
# kcontacts
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/kcontacts-6.20.0.tar.xz
chk b253cd4864a3f3d4343485cc4bfe1b0344ccf5136ead2ada359e6933e09253de
### END PASTE ###
#
# KDE Gears - Generated by gen-kde-gears.sh
#
server http://download.kde.org/stable/release-service/
# kmime
# last changed: 2025-12-16
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-kde-gears.sh)
file 25.12.0/src/kmime-25.12.0.tar.xz
chk c21f17b1fca6826487cd8e22cd551dee9340a52237c59670cc8c43265b0f4635
# kmbox
# last changed: 2025-12-16
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-kde-gears.sh)
file 25.12.0/src/kmbox-25.12.0.tar.xz
chk 3a6a109bdc4a1648918d4d332aaac2447f67710d87ee9a1bcfac16991b8e93e8
# mimetreeparser
# last changed: 2025-12-16
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-kde-gears.sh)
file 25.12.0/src/mimetreeparser-25.12.0.tar.xz
chk 63662367842e25b8e13c7523d0542847a1cffb36c72072bfe3b2942eccdd7841
#
# GPGME is stored on the GnuPG server
#
server https://gnupg.org/ftp/gcrypt
# gpgme
# last changed: 2025-09-23 / 2025-10-20
# by: wk
# verified: swdb
file gpgme/gpgme-2.0.1.tar.bz2
chk 821ab0695c842eab51752a81980c92b0410c7eadd04103f791d5d2a526784966
# gpgmepp
# last changed: 2025-06-03
# by: wk
# verified: swdb
file gpgmepp/gpgmepp-2.0.0.tar.xz
chk d4796049c06708a26f3096f748ef095347e1a3c1e570561701fe952c3f565382
# qgpgme
# last changed: 2025-06-03
# by: wk
# verified: swdb
file qgpgme/qgpgme-2.0.0.tar.xz
chk 15645b2475cca6118eb2ed331b3a8d9442c9d4019c3846ba3f6d25321b4a61ad
#
# Snapshots stored on a GnuPG server
#
server https://gnupg.net/snapshots
# This is a respin of the release tag without the wallpapers and
# cursor themes to avoid including a huge source package.
# See gen-tarball.sh for details.
# breeze
# last changed: 2025-12-16
# by: sune
# verified: Tarball created by sune.
file breeze/breeze-202512161010.tar.xz
chk b45a7f78b841cdf98efa528d687e348590aa7a72bab1310d9deb1dd8ca52d28a
# scute
# last changed: 2024-07-19
# by: aheinecke
# verified: Tarball created by aheinecke.
file scute/scute-1.7.1-beta45.tar.xz
chk 6bc88a71fe51e76d374d1544fa4d42e667f618ee3e5c37581a2e858427ac50ee
# gpg4win-tools
# last changed: 2026-01-02
# by: wk
# verified: Tarball created by builder.
file gpg4win-tools/gpg4win-tools-202601021049.tar.xz
chk 81f8e3239657c8bd80e23cf954a4d5f5cd9d2b496d4e0decaf80f20d7d9ec683
# libkleo
# last changed: 2026-01-02
# by: wk
# verified: Tarball created by builder.
file libkleo/libkleo-202601021049.tar.xz
chk ffd59200a1c92ee42e95b426c8d50f6e2c862701f15b2d29f0f06f3ff0d6ade8
# kleopatra
# last changed: 2026-01-02
# by: wk
# verified: Tarball created by builder.
file kleopatra/kleopatra-202601021049.tar.xz
chk fb08d3d842613c000c705ee69fb6053094b40e59a8fd55b7896f7e082742a543
# gpgoljs
# last changed: 2025-12-22
# by: wk
# verified: Tarball created by builder.
file gpgoljs/gpgoljs-202512221539.tar.xz
chk ecc038c65fea859eea3a28e046d48bee4df5558aee85e946496f55db85d0ef23
#
# Gpgpass - not stable enough for anyone
#
###if gnupg != gnupg22
###
#### gpgpass
#### last changed: 2025-03-25
#### by: builder
#### verified: Tarball created by builder.
###file gpgpass/gpgpass-202503251134.tar.xz
###chk bf42dbedc65902f02ba124ae2ddd2dd7156979bfe3ec46b05dc84381d7d28be0
###
###fi # gnupg22 - gpgpass
###
#
# Okular and dependencies
#
if gnupg != gnupg22
# poppler
# last changed: 2025-12-12
# by: wk
# verified: Tarball created by builder.
file poppler/poppler-202512121040.tar.xz
chk 53baff5ca8eb6ce1f99dbe1c65207fbaf3c5f4330c3ea38f3458cdb7cdc6a7eb
# okular
# last changed: 2025-12-11
# by: wk
# verified: Tarball created by builder.
file okular/okular-202512111542.tar.xz
chk dae20e59449ab392377052d25d4448568c051de3b3c73c8cc63ea508204f2a69
fi # !gnupg22 - Current Okular et al.
# And here comes the old poppler version as used by vsd 3.3. This
# comes after the current version due to the way the gen-tarball.sh
# implements its --auto option.
if gnupg = gnupg22
# Okular and dependencies
# poppler
# last changed: 2023-09-08
# by: aheinecke
# verified: Tarball created by aheinecke.
file poppler/poppler-202309080910.tar.xz
chk 2ca1273a6ef9ce00e9bc886b0864ef02b88f4df2525922e1ac322ce7360e6621
# okular
# last changed: 2023-11-22
# by: aheinecke
# verified: Tarball created by aheinecke.
file okular/okular-202311221749.tar.xz
chk 205df68c183900a1b21d1381d9a3d7554a642fa6dd3ef7e9bc5bbcfcd0aa8f1b
fi # gnupg22 - Legacy Okular
#
# breeze-icons
# This package must be listed *after* breeze. Otherwise, `./download.sh --update`
# will remove the breeze-icons package when the breeze package needs to be
# downloaded.
#
server https://download.kde.org/stable/frameworks
# breeze-icons
# last changed: 2025-12-08
# by: sune
# verified: PGP Signed by ./kde-release-keys.gpg (created by gen-frameworks.sh)"
file 6.20/breeze-icons-6.20.0.tar.xz
chk 0a47b28a04a086ccb5b4afb51d6677180006819d0d9302524721689bfa4ad13c
#
# Libgcrypt
#
server https://gnupg.org/ftp/gcrypt
# last changed 2023-11-16
# by wk
# verified: [taken from buildtree]
if gnupg = gnupg22
file libgcrypt/libgcrypt-1.8.11.tar.bz2
chk c98249fb5bb1f6017f5f9bf484327a940b59075bca7c46fa69ebb54098249860
fi
# last changed 2026-01-29
# by wk
# verified: [taken from buildtree]
if gnupg != gnupg22
file libgcrypt/libgcrypt-1.12.0.tar.bz2
chk 0311454e678189bad62a7e9402a9dd793025efff6e7449898616e2fc75e0f4f5
fi
#
# GnuPG proper
#
server https://gnupg.org/ftp/gcrypt
# All tarballs from this server are verified with an openpgp
# signature made by "Werner Koch (dist sig)" or one of the other
# gnupg main contributors.
#
# This is the GnuPG used for vsd 3.x
#
# last changed 2025-01-07
# by builder
# verified: [taken from buildtree]
if gnupg = gnupg22
name gnupg-2.2.46.tar.bz2
file gnupg/gnupg-2.2.46.tar.bz2
chk e22ec3ff396df2011236a2d84b1933f646805daa736ef096feab1d5e8924be5c
name gnupg-w32-2.2.46_20250107-bin.exe
file binary/gnupg-w32-2.2.46_20250107.exe
chk 6ae33d91dd36e28675edcf3fa30face98adda9d02ade9d5786c0a624f6779df5
name gnupg-w32-2.2.46_20250107-src.tar.xz
file binary/gnupg-w32-2.2.46_20250107.tar.xz
link gnupg-msi-2.2.46_20250107-src.tar.xz
chk d44306ef84d4823587b711983e3e9e17a1c6b374108aea11f8feb6b7866cbcd2
name gnupg-msi-2.2.46_20250107-bin.wixlib
file binary/gnupg-w32-2.2.46_20250107.wixlib
chk 1f955b980780a610f9550b1ef965a0f61a2c74f7b52f458a0dbf1c75b5627d93
fi # gnupg22
-#
-# This is the GnuPG used for gpg4win 4.x
-#
-# last changed 2024-11-25
-# by builder
-# verified: [taken from buildtree]
-if gnupg = gnupg24
-
-name gnupg-2.4.7.tar.bz2
-file gnupg/gnupg-2.4.7.tar.bz2
-chk 7b24706e4da7e0e3b06ca068231027401f238102c41c909631349dcc3b85eb46
-
-name gnupg-w32-2.4.7_20241125-bin.exe
-file binary/gnupg-w32-2.4.7_20241125.exe
-chk caf2904c02c02c94cbe137f01b63e5a43dbea92d27ea66e56f0af4af2c70c170
-
-name gnupg-w32-2.4.7_20241125-src.tar.xz
-file gnupg/gnupg-w32-2.4.7_20241125.tar.xz
-link gnupg-msi-2.4.7_20241125-src.tar.xz
-chk 24d506ebdeaaa3f6abb314c2e1462ee3f61aaf622ae3df9a2af8c398a0518faf
-
-name gnupg-msi-2.4.7_20241125-bin.wixlib
-file binary/gnupg-w32-2.4.7_20241125.wixlib
-chk 97a30e3477f258851d8def41e0330577b40a4c9628dd951cc1aae48af0c58146
-
-fi # gnupg24
-
#
# This is the GnuPG used for gpg4win 5.x and vsd 4.x
#
# last changed 2026-01-27
# by builder
# verified: [taken from buildtree]
if gnupg = gnupg26
name gnupg-2.5.17.tar.bz2
file gnupg/gnupg-2.5.17.tar.bz2
chk 2c1fbe20e2958fd8fb53cf37d7c38e84a900edc0d561a1c4af4bc3a10888685d
name gnupg-w32-2.5.17_20260127-bin.exe
file binary/gnupg-w32-2.5.17_20260127.exe
chk 734b0d5b2aa2d1343e02649887f0744b7bbc55f9a292314746a86e479752499a
name gnupg-w32-2.5.17_20260127-src.tar.xz
file gnupg/gnupg-w32-2.5.17_20260127.tar.xz
link gnupg-msi-2.5.17_20260127-src.tar.xz
chk 949d801686ac9f694d8634b925fbe6fdbfa4718bca1eb89438f7e1615f71a626
name gnupg-msi-2.5.17_20260127-bin.wixlib
file binary/gnupg-w32-2.5.17_20260127.wixlib
chk 18112071c4edc3fdc15a0b2d3645723483450bd75aa7203e12d614cac46ab68b
fi # gnupg26
# eof

File Metadata

Mime Type
text/x-diff
Expires
Thu, Feb 5, 9:36 PM (1 d, 13 h)
Storage Engine
local-disk
Storage Format
Raw Data
Storage Handle
f5/71/6d99bb62582ecce1659733905736

Event Timeline