[Commented] (MNG-6339) Tar gzip binary MD5 sum mismatch

Previous Topic Next Topic
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view

[Commented] (MNG-6339) Tar gzip binary MD5 sum mismatch

JIRA jira@apache.org

    [ https://issues.apache.org/jira/browse/MNG-6339?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16325084#comment-16325084 ]

Karl Heinz Marbaise commented on MNG-6339:

Hi first thanks for checking but unfortunately I can't reproduce this issue:
I have downloaded all files from both sides the original distribution are https://dist.apache.org/repos/dist/release/maven/maven-3/3.5.2/binaries/ and also from the corresponding SVN repository https://dist.apache.org/repos/dist/release/maven/maven-3/3.5.2/binaries/ and do not get any [differences in checksums|https://github.com/khmarbaise/scripts/blob/master/downloadcheck.sh]..
Filename: apache-maven-3.5.2-bin.tar.gz..
   SHA1 Checksum :
        generated : 190dcebb8a080f983af4420cac4f3ece7a47dd64
             read : 190dcebb8a080f983af4420cac4f3ece7a47dd64 from file apache-maven-3.5.2-bin.tar.gz.sha1
   Compare Result : ok.

   MD5 Checksum :
        generated : 948110de4aab290033c23bf4894f7d9a
             read : 948110de4aab290033c23bf4894f7d9a from file apache-maven-3.5.2-bin.tar.gz.md5
   Compare Result : ok.
~/Downloads/Download-From-Dist-Repo$ downloadcheck.sh apache-maven-3.5.2-bin.zip
~/Downloads/Download-From-Dist-Repo$ downloadcheck.sh apache-maven-3.5.2-bin.zip
Filename: apache-maven-3.5.2-bin.zip..
   SHA1 Checksum :
        generated : 23adadc90b7f79ad84bd14574581d0145611bfda
             read : 23adadc90b7f79ad84bd14574581d0145611bfda from file apache-maven-3.5.2-bin.zip.sha1
   Compare Result : ok.

   MD5 Checksum :
        generated : b8d8d49d8178734124c4ff6f3a409d3d
             read : b8d8d49d8178734124c4ff6f3a409d3d from file apache-maven-3.5.2-bin.zip.md5
   Compare Result : ok.

The change which you have mentioned is based on the missing of the checksums at all. This has been fixed (added the checksums) by me which you can check via the history in the svn repository.

Have you downloaded those artifacts from the above site or via a mirror ?

> Tar gzip binary MD5 sum mismatch
> --------------------------------
>                 Key: MNG-6339
>                 URL: https://issues.apache.org/jira/browse/MNG-6339
>             Project: Maven
>          Issue Type: Bug
>    Affects Versions: 3.5.2
>            Reporter: Sam Simmons
>            Priority: Trivial
> The MD5 sum does not match the tar gzip binary in http://archive.apache.org/dist/maven/maven-3/3.5.2/binaries/. It looks like both the md5 and shasum were updated 3 days after the archives were added. Please upload the correct checksums.
> Provided MD5 sum 948110de4aab290033c23bf4894f7d9a  apache-maven-3.5.2-bin.tar.gz.md5
> Actual MD5 sum 6edf85f3e282e248db38b44ceb123bd0  apache-maven-3.5.2-bin.tar.gz
> Thanks!

This message was sent by Atlassian JIRA