From mboxrd@z Thu Jan 1 00:00:00 1970 From: ludo@gnu.org (Ludovic =?utf-8?Q?Court=C3=A8s?=) Subject: gzip-1.7.tar.gz hash mismatch on core-updates Date: Fri, 08 Apr 2016 00:12:41 +0200 Message-ID: <87fuux6pba.fsf@gnu.org> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:38427) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aoIAV-0002cQ-Re for guix-devel@gnu.org; Thu, 07 Apr 2016 18:12:52 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1aoIAS-00029M-JA for guix-devel@gnu.org; Thu, 07 Apr 2016 18:12:51 -0400 List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Efraim Flashner Cc: Guix-devel --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi! Commit ea5d388257664d703df23cf3eb0da7b6546d6c42 updates gzip to 1.7. Its specified SHA256 is: 1as1ddq58spflzz5kxm0ni0xfpswrkkrncjpxyb3aw77gizcacgv However, when downloading right now, I get a different hash: =2D-8<---------------cut here---------------start------------->8--- $ guix download mirror://gnu/gzip/gzip-1.7.tar.gz Starting download of /tmp/guix-file.EtGdvV From=20http://ftpmirror.gnu.org/gzip/gzip-1.7.tar.gz... following redirection to `http://mirror1.babylon.network/gnu/gzip/gzip-1.7.= tar.gz'... gzip-1.7.tar.gz 1.1MiB 740KiB/s 00:02 [####################] 1= 00.0% /gnu/store/81229hs4j6yyk2hraka505rjp41b9nrs-gzip-1.7.tar.gz 010rjpxh2vg3qfzph9lx7a35gfs5imkg2mkri26620bqihbsmjzc $ guix download mirror://gnu/gzip/gzip-1.7.tar.gz.sig Starting download of /tmp/guix-file.jK41ds From=20http://ftpmirror.gnu.org/gzip/gzip-1.7.tar.gz.sig... following redirection to `http://mirror.ibcp.fr/pub/gnu/gzip/gzip-1.7.tar.g= z.sig'... gzip-1.7.tar.gz.sig 801B 2.1MiB/s 00:00 [####################] 1= 00.0% /gnu/store/r511bm51719l80j1xijflmyfyd3691pd-gzip-1.7.tar.gz.sig 03j0bcydran7fas42sm1lxf09qcjwp4c2y9rzp42zj088mx6s32b $ gpg --verify /gnu/store/r511bm51719l80j1xijflmyfyd3691pd-gzip-1.7.tar.gz.= sig /gnu/store/81229hs4j6yyk2hraka505rjp41b9nrs-gzip-1.7.tar.gz gpg: Signature made Mon 28 Mar 2016 06:05:12 AM CEST using RSA key ID 000BE= EEE gpg: Good signature from "Jim Meyering " [full] gpg: aka "Jim Meyering " [full] gpg: aka "Jim Meyering " [undefined] =2D-8<---------------cut here---------------end--------------->8--- Could you check if you have a copy of gzip-1.7.tar.gz with the hash that=E2=80=99s in the repo (using =E2=80=98guix build -S gzip=E2=80=99 in = =E2=80=98core-updates=E2=80=99) and if so, send the diff? (I=E2=80=99d like to know if it=E2=80=99s a mistake or if gzip-1.7.tar.gz h= as been modified in place on ftp.gnu.org.) Thanks in advance. :-) Ludo=E2=80=99. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJXBttdAAoJEAkLEZk9muu1rVsP/1XbMCm4z3aou649PEraymMq bGCMp++LDgLcDEMpAXA4jXQoxPnhQJGTIfVGDfEENeeYXjJJ+ln7Q8c8O5eBpEdU 84ezEF2Cbej86I5Q8qjNaaEiCoXBIXx/wC+Yuz00ZuyNfrxWVh/aW8QGr1GKL2fc N9hpeAjsptJMNwJAKFv6Vpz/AOGp6z3lsbHFZpcn88Me95/6ZfRfY4x+36uy5CO2 K362a/mFa8fHfXUzIpNmRscH+PlfZ5Df+F6jyJhbe9qG6ofzMYE5NholfwZb3Fsi 6jzWSwpPDNZG2xsQGhpA08qJhiLxTTQTbGKOLmJbmY11cUH3j6m0Gh2YRlk7Xx6k u7IKpabZZJ2vfKBHXsKiSM7Etrk44SG9h/0iX/dV4HBcP2UnlUYDNCZaALwZzdpJ sso6w9qemYQvrsQhf1phgIxzLxMvGwpbXIqSgEcHukoB1VeA3haO3XigOXZ51n4r X8BXy3C/Itz9rYbrl1RjeoHsZdHJLsPWhx7M0el4H4vUWnH3q7dgHI3JNkyVsU14 Yi6fLRW9fWvEZltoNGKaILX2JxXgm3RVXNcC5/2z06qyNXa23b5c01Ew6BmF7eCF kNMGjuo6pl/8kX7kSsgIBxMc7WwI7RKwA5FujhpPqgYCekrwYcFFo0URG2r7NEB/ jnxSWW5O7dZmYHtJQ9Lh =erJK -----END PGP SIGNATURE----- --=-=-=--