Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Date:	Fri, 2 Sep 2005 13:39:31 +1000 (EST)
From:	Luke Kendall <luke DOT kendall AT cisra DOT canon DOT com DOT au>
Subject:	libgcrypt md5sum mismatch and setup
To:	cygwin AT cygwin DOT com
MIME-Version:	1.0
Message-Id:	<20050902033932.188D083CA5@pessard.research.canon.com.au>

When checking the md5 integrity of an rsync copy of a cygwin mirror, 
should I specifically *not* check the integrity of the setup.hint files?

A month or two ago we noticed that libgcrypt's md5.sum file did not
check out against the actual setup.hint file.  This is now true of a few
mirror sites we've tried.

$ md5sum --check md5.sum 
libgcrypt-1.2.0-2-src.tar.bz2: OK
libgcrypt-1.2.0-2.tar.bz2: OK
libgcrypt-1.2.1-1-src.tar.bz2: OK
libgcrypt-1.2.1-1.tar.bz2: OK
setup.hint: FAILED
md5sum: WARNING: 1 of 5 computed checksums did NOT match

$ ls -l   
total 2452
-rw-rw-r--  13 mirror technic 1088056 Oct  1  2004 libgcrypt-1.2.0-2-src.tar.bz2
-rw-rw-r--  13 mirror technic  277027 Oct  1  2004 libgcrypt-1.2.0-2.tar.bz2
-rw-rw-r--  13 mirror technic  821466 Jul 10 14:35 libgcrypt-1.2.1-1-src.tar.bz2
-rw-rw-r--  13 mirror technic  293868 Jul 10 14:35 libgcrypt-1.2.1-1.tar.bz2
-rw-rw-r--  13 mirror technic     293 Jul 13 09:07 md5.sum
-rw-rw-r--  14 mirror technic     222 Jul 12 06:02 setup.hint

$ grep setup md5.sum
4c7da7e26a083aa01ef7345840c17203  setup.hint
$ md5sum setup.hint 
c628190b107c291d751216192515b6f5  setup.hint

$ cat setup.hint
sdesc: "A general purpose crypto library based on the code from GnuPG."
ldesc: "Libgcrypt is a general purpose crypto library based on the code
used in GnuPG."
category: Libs
requires: cygwin libgpg-error _update-info-dir

Interestingly, setup.exe (with All packages chosen to install) only
complained of an incomplete download on t1lib, not on libgcrypt.
(NB: FWIW, we noticed that t1lib also failed its md5 check for the
chosen mirror site.)

luke


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -