On Wed, 9 Mar 2005, Corinna Vinschen wrote:

> On Mar 9 02:54, Damien Miller wrote:
>> OpenSSH 4.0 has just been released. It will be available from the
>> mirrors listed at http://www.openssh.com/ shortly.
>> [...]
>> - MD5 (openssh-4.0.tgz) = 7dbf15fe7c294672e8822127f50107d0
>> - MD5 (openssh-4.0p1.tar.gz) = 122bec49d2cace00b71cc29b5ececed3

>
> I just downloaded openssh-4.0p1.tar.gz from
> ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/ and I'm getting
> another MD5 sum:
>
> $ md5sum openssh-4.0p1.tar.gz
> 7b36f28fc16e1b7f4ba3c1dca191ac92 openssh-4.0p1.tar.gz
>
> I'm wondering if that's just a wrong MD5 sum inthe announcement or if
> the version actually differs.


I get the same MD5 sum you do.
I've compared openssh-4.0p1.tar.gz to my copy of CVS and it looks fine.
(a couple of $Id lines and a blank line in log.c)
And "gpg --verify openssh-4.0p1.tar.gz.sig openssh-4.0p1.tar.gz"
indicates it's signed by djm.

It looks like Damien forgot to update the MD5 sum in the release notes
after the last minute change to log.c (see ChangeLog).

>
>
> Corinna
>
>


--
Tim Rice Multitalents (707) 887-1469
tim@multitalents.net


_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@mindrot.org
http://www.mindrot.org/mailman/listi...enssh-unix-dev