This is a discussion on Re: OpenSSH 4.0 released - openssh ; On Wed, Mar 09, 2005 at 07:18:17PM +0100, Corinna Vinschen wrote: > On Mar 9 02:54, Damien Miller wrote: > > OpenSSH 4.0 has just been released. It will be available from the > > mirrors listed at http://www.openssh.com/ shortly. ...
On Wed, Mar 09, 2005 at 07:18:17PM +0100, Corinna Vinschen wrote:
> On Mar 9 02:54, Damien Miller wrote:
> > OpenSSH 4.0 has just been released. It will be available from the
> > mirrors listed at http://www.openssh.com/ shortly.
> > [...]
> > - MD5 (openssh-4.0.tgz) = 7dbf15fe7c294672e8822127f50107d0
> > - MD5 (openssh-4.0p1.tar.gz) = 122bec49d2cace00b71cc29b5ececed3
> I just downloaded openssh-4.0p1.tar.gz from
> ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/ and I'm getting
> another MD5 sum:
> $ md5sum openssh-4.0p1.tar.gz
> 7b36f28fc16e1b7f4ba3c1dca191ac92 openssh-4.0p1.tar.gz
> I'm wondering if that's just a wrong MD5 sum inthe announcement or if
> the version actually differs.
-----BEGIN PGP SIGNED MESSAGE-----
In short, the MD5 signature for the Portable tarball in the release notes
is wrong. The correct signature is:
There was a last-minute compile fix which require a re-rolling of the
I have confirmed that the signature in the release notes matches the
signature for the tarball without that fix, that the the tarball on the
FTP site contains the fix and that the only difference between the two is
the aforementioned fix. I have also confirmed a good gpg signature from
The online version of the release notee has also been corrected and will
appear at http://www.openssh.com/txt/release-4.0 shortly.
Apologies to all for the confusion.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (OpenBSD)
-----END PGP SIGNATURE-----
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4 37C9 C982 80C7 8FF4 FA69
Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.
openssh-unix-dev mailing list