Score:0

Attempting to verify hash sums for installed binaries openssl, wget, and perl

om flag

I am trying to verify if the installed binaries on my system for openssl, perl, and wget are valid. Per a Lynis audit these binaries are just "Found" instead of "Found known binary." If anyone could verify these hash sums against their system I would greatly apprecaite it. This machine is running Xubuntu 20.04.1.

Or should I be able to compare these hashes to the published hashes at the package maintainer's website? I already tried with openssl and they do not match.

openssl 1.1.1f

bc0faa059c5684a146ef9e26316204cd  /usr/bin/openssl md5
bb7c8df9cf18384807546ab6c583d33e64d6d4e3  /usr/bin/openssl sha1
beb930dc224ee896191010bdb71536f8856ae7f195dd16bae6080419aba929e1  /usr/bin/openssl sha256

perl 5.30.0

57987e89de73cb1f5bc6b1c1fda2fe69  /usr/bin/perl md5
92a75fde2cd431757e62435604fa4bb884c129dc  /usr/bin/perl sha1
62a376931186d647cc79d385d2beeb51c1ca392b9285cbf887e1a4a615c043a7  /usr/bin/perl sha256

wget 1.20.3

996940118df7bb2aaa718589d4e95c08  /usr/bin/wget md5
ed4c60aa5e1eebceabd2e70936d8a5a962fe1d65  /usr/bin/wget sha1
a80d7a6546c971b51bd3f0c81e836e70650f9a75f1b2753446eaa82e980bd5a0  /usr/bin/wget sha256
mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.