1.3.0 checksums and release dates

General support for problems installing or using Deluge
Post Reply
buffyg
New User
New User
Posts: 5
Joined: Thu Sep 30, 2010 3:32 pm

1.3.0 checksums and release dates

Post by buffyg »

I'm trying to build 1.3.0 using macports. Unfortunately macports complains that the checksums are not correct. There appears to be some underlying problems:

1) numerous sites appear to have announced 1.3.0 availability on September 14, whereas the release notes and most authoritative source distribution are dated September 18. I noticed that the macports changeset that includes the checksums is dated September 14, but these checksums are not the same as those provided in the release notes provided several days later, suggesting that some source discrepancies in the release, perhaps with nothing different other than the inclusion of release notes.
2) the release notes available by web can't be verified by SSL (the domain is virtually hosted but the certificate is expired and doesn't support virtual hosting), meaning that they can't be authoritatively attributed
3) the inability to attribute the release notes can't be overcome, as they provide a checksum rather than a signed digest of the release, which could be verified by other means

It would be helpful if someone might clarify what might have caused the immediate issue in item 1 and say whether anything might be done about the release verification issues when items 2 and 3 are taken together.
buffyg
New User
New User
Posts: 5
Joined: Thu Sep 30, 2010 3:32 pm

Re: 1.3.0 checksums and release dates

Post by buffyg »

Useful info: the checksums provided by macports are:

:info:checksum Portfile checksum: deluge-1.3.0.tar.bz2 md5 d3cdb501983fcf793ee368b5a8e429c0
:info:checksum Distfile checksum: deluge-1.3.0.tar.bz2 md5 5fca34e2e31753a8ba0ccb942f0e993e
:error:checksum Checksum (sha1) mismatch for deluge-1.3.0.tar.bz2
:info:checksum Portfile checksum: deluge-1.3.0.tar.bz2 sha1 75c1030bbd32c9eebea53c021e19035ebe343c14
:info:checksum Distfile checksum: deluge-1.3.0.tar.bz2 sha1 8acefff67bd82e38314b43887bd5f10da9a12052
:error:checksum Checksum (rmd160) mismatch for deluge-1.3.0.tar.bz2
:info:checksum Portfile checksum: deluge-1.3.0.tar.bz2 rmd160 28d2162d67684f1969ed5a8882dea358bb022bd2
:info:checksum Distfile checksum: deluge-1.3.0.tar.bz2 rmd160 dca83b23603a140d4abbb4de7672bf4259018167
Post Reply