Checksums for plugins zip containers

Checksums for plugins zip containers

by Enrique Rosas Quezada -
Number of replies: 2

Dear Moodle community on this forum

My Moodle instance does not allow automatic plugin installation/update via the web interface, so I have to do it manually at the moment.

For this reason, I have been visiting the plugin site https://moodle.org/plugins in search of the zip containers to download and install by hand.


As I am concerned about the integrity of these files I wonder why many of them do not have version information with MD5 or SHA256 checksums on their pages.

What would be your recommendation? I suppose requesting this info directly from the developers would annoy someone. My guess is that a policy regarding integrity checks might be useful.

Greetings to all.

Enrique

Average of ratings: -
In reply to Enrique Rosas Quezada

Re: Checksums for plugins zip containers

by Enrique Rosas Quezada -
Sorry, I was a little confused navegating the web interface. The information can be found in every plugin page by:
1) Pressing the link to the Release version of the plugin
 
image.png
2) Then the MD5 Sum hash can be found in the 'Version information' box.
 
Thanks @jrchamp
Average of ratings: -
In reply to Enrique Rosas Quezada

Re: Checksums for plugins zip containers

by Enrique Rosas Quezada -
I would like to add a description of how to verify that the plugin or theme you are about to install manually is the one offered by the developers. I am using the Terminal and the Tiny Wiris plugin as an example.

If you have a better way of doing this, please let us know. For people not familiar with the process:

0) Find the plugin file to download on the Version Release page. The Moodle plugins portal has a download button, copy the url to your clipboard.

1) Download the file

$ wget https://moodle.org/plugins/download.php/34674/tiny_wiris_moodle45_2025013000.zip
 
2) On the same web page, in the Version Information box, get the MD5 Sum and copy it to the clipboard.
$ echo "5866c17dc629579972c32a9b6183314b tiny_wiris_moodle45_2025013000.zip" | md5sum --check
tiny_wiris_moodle45_2025013000.zip: The sum matches

3) In case sum does not match, the command will give a warning.

Best regards.

Average of ratings:Useful (1)