Date: Sat, 27 Jan 2007 22:31:57 -0500 From: Wesley Shields <wxs@atarininja.org> To: Paul Schmehl <pauls@utdallas.edu> Cc: "Freebsd Ports: Archivers" <ports@freebsd.org>, security@silcnet.org, aquatique-ports@rambler.ru Subject: Re: Problem with devel/silc-toolkit Message-ID: <20070128033157.GB79646@atarininja.org> In-Reply-To: <2A54A37FBF8B6E7EE4DEAA5F@paul-schmehls-powerbook59.local> References: <3B27E5D772A78D81D72D9420@paul-schmehls-powerbook59.local> <20070128014441.GA76439@atarininja.org> <D2F9DABD9A545B74551F4D18@paul-schmehls-powerbook59.local> <20070128024514.GA79142@atarininja.org> <2A54A37FBF8B6E7EE4DEAA5F@paul-schmehls-powerbook59.local>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, Jan 27, 2007 at 09:18:29PM -0600, Paul Schmehl wrote: > make checksum works here as well: > root@utd59514# make checksum > ===> Define WITHOUT_IPV6 to disable IPv6 support > ===> Define WITHOUT_OPTIMIZED_ASM to disable assembler optimizations > ===> Define WITH_PTHREADS to enable pthreads support > > ===> Define WITH_OPTIMIZED_CFLAGS to enable compilation optimizations > ===> which is known to break some platforms (e.g., alpha) > => MD5 Checksum OK for silc-toolkit-1.0.2.tar.bz2. > => SHA256 Checksum OK for silc-toolkit-1.0.2.tar.bz2. > > I just downloaded it to my Mac here at home, and it doesn't pass the > checksum here either: > paul-schmehls-powerbook59:~/Desktop pauls$ md5sum > silc-toolkit-1.0.2.tar.bz2 > 5e80212669182d986957d6d6af724c8b silc-toolkit-1.0.2.tar.bz2 > > <http://www.silcnet.org/download/toolkit/sources/silc-toolkit-1.0.2.tar.bz2.md5>; > 869ce01349444a28fbace3c1bfe745ff silc-toolkit-1.0.2.tar.bz2 > > The md5sum of the file I just downloaded doesn't match what they have on > their website. > > Can you post the contents of your distinfo file please? > cat distinfo > MD5 (silc-toolkit-1.0.2.tar.bz2) = 869ce01349444a28fbace3c1bfe745ff > SHA256 (silc-toolkit-1.0.2.tar.bz2) = > 45b289f2c328378e5fbdfc394ff71cbb66ef7c4fdc882185dbeeb08b28d25c7a > SIZE (silc-toolkit-1.0.2.tar.bz2) = 2545183 MD5 (silc-toolkit-1.0.2.tar.bz2) = 869ce01349444a28fbace3c1bfe745ff SHA256 (silc-toolkit-1.0.2.tar.bz2) = 45b289f2c328378e5fbdfc394ff71cbb66ef7c4fdc882185dbeeb08b28d25c7a SIZE (silc-toolkit-1.0.2.tar.bz2) = 2545183 > Clearly, something is wrong. I'm not saying that it's been compromised, > but we do md5 and sha256 checksums for a reason. Clearly. There is a chance that one or more of the mirrors is corrupted and depending upon which one you pull from will get either a passing or failing checksum. > I do not think this is a local problem. I'm now leaning towards a mirroring problem. Have you ruled this out? -- WXS
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070128033157.GB79646>