Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Date: Fri, 2 Sep 2005 13:39:31 +1000 (EST)
From: Luke Kendall <luke DOT kendall AT cisra DOT canon DOT com DOT au>
Subject: libgcrypt md5sum mismatch and setup
To: cygwin AT cygwin DOT com
MIME-Version: 1.0
Content-Type: TEXT/plain; CHARSET=US-ASCII
Message-Id: <20050902033932.188D083CA5@pessard.research.canon.com.au>

When checking the md5 integrity of an rsync copy of a cygwin mirror, 
should I specifically *not* check the integrity of the setup.hint files?

A month or two ago we noticed that libgcrypt's md5.sum file did not
check out against the actual setup.hint file.  This is now true of a few
mirror sites we've tried.

$ md5sum --check md5.sum 
libgcrypt-1.2.0-2-src.tar.bz2: OK
libgcrypt-1.2.0-2.tar.bz2: OK
libgcrypt-1.2.1-1-src.tar.bz2: OK
libgcrypt-1.2.1-1.tar.bz2: OK
setup.hint: FAILED
md5sum: WARNING: 1 of 5 computed checksums did NOT match

$ ls -l   
total 2452
-rw-rw-r--  13 mirror technic 1088056 Oct  1  2004 libgcrypt-1.2.0-2-src.tar.bz2
-rw-rw-r--  13 mirror technic  277027 Oct  1  2004 libgcrypt-1.2.0-2.tar.bz2
-rw-rw-r--  13 mirror technic  821466 Jul 10 14:35 libgcrypt-1.2.1-1-src.tar.bz2
-rw-rw-r--  13 mirror technic  293868 Jul 10 14:35 libgcrypt-1.2.1-1.tar.bz2
-rw-rw-r--  13 mirror technic     293 Jul 13 09:07 md5.sum
-rw-rw-r--  14 mirror technic     222 Jul 12 06:02 setup.hint

$ grep setup md5.sum
4c7da7e26a083aa01ef7345840c17203  setup.hint
$ md5sum setup.hint 
c628190b107c291d751216192515b6f5  setup.hint

$ cat setup.hint
sdesc: "A general purpose crypto library based on the code from GnuPG."
ldesc: "Libgcrypt is a general purpose crypto library based on the code
used in GnuPG."
category: Libs
requires: cygwin libgpg-error _update-info-dir

Interestingly, setup.exe (with All packages chosen to install) only
complained of an incomplete download on t1lib, not on libgcrypt.
(NB: FWIW, we noticed that t1lib also failed its md5 check for the
chosen mirror site.)

luke


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/