Mailing List Archive: Checksum doesn't match

Hello,

I have down loaded the latest version of GnuPG and running md5 against
the .gz file (gnupg-1.0.1.tar.gz) produces the following:

MD5 (gnupg-1.0.1.tar.gz) = 14ce577afd03d56cba5d8ee59b9580ed

According to the README file, however, I should see this:

fd9351b26b3189c1d577f0970f9dcadc gnupg-x.y.z.tar.gz

I have attempted several down-loads and they always result in the
first sum.

The md5 program was built on Suns and SGIs. This was obtained from the
CIAC, and we have no reason to believe this to be a tainted source. It
has worked with no discrepancies for other public domain source code
with accompanying checksums.

Any information would be useful.

Thanks.

George Sinclair | gsinclair@nodc.noaa.gov

On Mon, 31 Jul 2000, George Sinclair wrote:

> I have down loaded the latest version of GnuPG and running md5 against
> the .gz file (gnupg-1.0.1.tar.gz) produces the following:
>
> MD5 (gnupg-1.0.1.tar.gz) = 14ce577afd03d56cba5d8ee59b9580ed
>
> According to the README file, however, I should see this:
>
> fd9351b26b3189c1d577f0970f9dcadc gnupg-x.y.z.tar.gz

Did you notice the x.y.z? This is an example. BTW, it is not so easy
to insert an MD5sum into the checksummed file - if you are going to
try it, take a lot of machines and plenty of time to calculate
so-called collisions.

> I have attempted several down-loads and they always result in the
> first sum.

I'd suggest to try just another download; this time with gnupg-1.0.2.

I have posted the md5sums to the list - see http://lists.gnupg.org

Werner

--
Werner Koch GnuPG key: 621CC013
OpenIT GmbH http://www.OpenIT.de