From owner-freebsd-ports@FreeBSD.ORG Sun Jan 28 03:28:41 2007 Return-Path: X-Original-To: ports@freebsd.org Delivered-To: freebsd-ports@FreeBSD.ORG Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id E519216A401 for ; Sun, 28 Jan 2007 03:28:41 +0000 (UTC) (envelope-from wxs@atarininja.org) Received: from syn.atarininja.org (syn.csh.rit.edu [129.21.60.158]) by mx1.freebsd.org (Postfix) with ESMTP id C047F13C461 for ; Sun, 28 Jan 2007 03:28:41 +0000 (UTC) (envelope-from wxs@atarininja.org) Received: by syn.atarininja.org (Postfix, from userid 1001) id 1D0695C34; Sat, 27 Jan 2007 22:31:57 -0500 (EST) Date: Sat, 27 Jan 2007 22:31:57 -0500 From: Wesley Shields To: Paul Schmehl Message-ID: <20070128033157.GB79646@atarininja.org> References: <3B27E5D772A78D81D72D9420@paul-schmehls-powerbook59.local> <20070128014441.GA76439@atarininja.org> <20070128024514.GA79142@atarininja.org> <2A54A37FBF8B6E7EE4DEAA5F@paul-schmehls-powerbook59.local> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <2A54A37FBF8B6E7EE4DEAA5F@paul-schmehls-powerbook59.local> User-Agent: Mutt/1.5.13 (2006-08-11) Cc: "Freebsd Ports: Archivers" , security@silcnet.org, aquatique-ports@rambler.ru Subject: Re: Problem with devel/silc-toolkit X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 28 Jan 2007 03:28:42 -0000 On Sat, Jan 27, 2007 at 09:18:29PM -0600, Paul Schmehl wrote: > make checksum works here as well: > root@utd59514# make checksum > ===> Define WITHOUT_IPV6 to disable IPv6 support > ===> Define WITHOUT_OPTIMIZED_ASM to disable assembler optimizations > ===> Define WITH_PTHREADS to enable pthreads support > > ===> Define WITH_OPTIMIZED_CFLAGS to enable compilation optimizations > ===> which is known to break some platforms (e.g., alpha) > => MD5 Checksum OK for silc-toolkit-1.0.2.tar.bz2. > => SHA256 Checksum OK for silc-toolkit-1.0.2.tar.bz2. > > I just downloaded it to my Mac here at home, and it doesn't pass the > checksum here either: > paul-schmehls-powerbook59:~/Desktop pauls$ md5sum > silc-toolkit-1.0.2.tar.bz2 > 5e80212669182d986957d6d6af724c8b silc-toolkit-1.0.2.tar.bz2 > > > 869ce01349444a28fbace3c1bfe745ff silc-toolkit-1.0.2.tar.bz2 > > The md5sum of the file I just downloaded doesn't match what they have on > their website. > > Can you post the contents of your distinfo file please? > cat distinfo > MD5 (silc-toolkit-1.0.2.tar.bz2) = 869ce01349444a28fbace3c1bfe745ff > SHA256 (silc-toolkit-1.0.2.tar.bz2) = > 45b289f2c328378e5fbdfc394ff71cbb66ef7c4fdc882185dbeeb08b28d25c7a > SIZE (silc-toolkit-1.0.2.tar.bz2) = 2545183 MD5 (silc-toolkit-1.0.2.tar.bz2) = 869ce01349444a28fbace3c1bfe745ff SHA256 (silc-toolkit-1.0.2.tar.bz2) = 45b289f2c328378e5fbdfc394ff71cbb66ef7c4fdc882185dbeeb08b28d25c7a SIZE (silc-toolkit-1.0.2.tar.bz2) = 2545183 > Clearly, something is wrong. I'm not saying that it's been compromised, > but we do md5 and sha256 checksums for a reason. Clearly. There is a chance that one or more of the mirrors is corrupted and depending upon which one you pull from will get either a passing or failing checksum. > I do not think this is a local problem. I'm now leaning towards a mirroring problem. Have you ruled this out? -- WXS