corrupt mirrors

[Steve Loughran <st...@gmail.com>]

I've forwarded this to infrastructure, but it may be of interest here
(esp. if infrastructure@apache drops the forwarded mail on account of
me not yet on the list)

We have a user claiming that the download of a binary from a mirror
doesnt match the expected. I 'm not sure that its going to be
subverted (hard to do discreetly in java), but we could have a look.
Maybe I'll install it in a win98 vm and see what it thinks it is.

This actually raises an interesting issue w.r.t java decompilers and
diff tools. Do we have anything that could compare the contents of two
archives, and, when it is a jar that is different, do a decompile and
compare to find out exactly how the jars differ?


-------- Original Message --------
Subject: Mirror has bad md5checksum
Date: Tue, 25 Jul 2006 14:11:20 -0700
From: Karl Zilles <zi...@1969web.com>
Reply-To: Ant Users List <us...@ant.apache.org>
Organization: 1969 Communications,  Inc.
To: user@ant.apache.org

Downloading ant from http://ant.apache.org/bindownload.cgi, I was
directed to a mirror: apache.adult-pilot.net.

I downloaded the file

http://apache.adult-pilot.net/ant/binaries/apache-ant-1.6.5-bin.zip

And compared the md5 checksum.  It does not match.

$ md5sum.exe  apache-ant-1.6.5-bin.zip
df671b2fbc6faabddd3b71fc88766021 *apache-ant-1.6.5-bin.zip

it should be:
50b60129b54fc8f96a84ee60d7599188

I downloaded
http://www.apache.org/dist/ant/binaries/apache-ant-1.6.5-bin.zip
from the main distribution.

The md5 checksum matches the correct one.

$ md5sum.exe apache-ant-1.6.5-bin.zip
50b60129b54fc8f96a84ee60d7599188 *apache-ant-1.6.5-bin.zip

So it look like the adult-pilot file is corrupted (or worse).




---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@ant.apache.org
For additional commands, e-mail: user-help@ant.apache.org