[ https://issues.apache.org/jira/browse/MNG-6339?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16325084#comment-16325084 ]
Karl Heinz Marbaise commented on MNG-6339: ------------------------------------------ Hi first thanks for checking but unfortunately I can't reproduce this issue: I have downloaded all files from both sides the original distribution are https://dist.apache.org/repos/dist/release/maven/maven-3/3.5.2/binaries/ and also from the corresponding SVN repository https://dist.apache.org/repos/dist/release/maven/maven-3/3.5.2/binaries/ and do not get any [differences in checksums|https://github.com/khmarbaise/scripts/blob/master/downloadcheck.sh].. {code} Filename: apache-maven-3.5.2-bin.tar.gz.. SHA1 Checksum : generated : 190dcebb8a080f983af4420cac4f3ece7a47dd64 read : 190dcebb8a080f983af4420cac4f3ece7a47dd64 from file apache-maven-3.5.2-bin.tar.gz.sha1 Compare Result : ok. MD5 Checksum : generated : 948110de4aab290033c23bf4894f7d9a read : 948110de4aab290033c23bf4894f7d9a from file apache-maven-3.5.2-bin.tar.gz.md5 Compare Result : ok. ~/Downloads/Download-From-Dist-Repo$ downloadcheck.sh apache-maven-3.5.2-bin.zip ~/Downloads/Download-From-Dist-Repo$ downloadcheck.sh apache-maven-3.5.2-bin.zip Filename: apache-maven-3.5.2-bin.zip.. SHA1 Checksum : generated : 23adadc90b7f79ad84bd14574581d0145611bfda read : 23adadc90b7f79ad84bd14574581d0145611bfda from file apache-maven-3.5.2-bin.zip.sha1 Compare Result : ok. MD5 Checksum : generated : b8d8d49d8178734124c4ff6f3a409d3d read : b8d8d49d8178734124c4ff6f3a409d3d from file apache-maven-3.5.2-bin.zip.md5 Compare Result : ok. {code} The change which you have mentioned is based on the missing of the checksums at all. This has been fixed (added the checksums) by me which you can check via the history in the svn repository. Have you downloaded those artifacts from the above site or via a mirror ? > Tar gzip binary MD5 sum mismatch > -------------------------------- > > Key: MNG-6339 > URL: https://issues.apache.org/jira/browse/MNG-6339 > Project: Maven > Issue Type: Bug > Affects Versions: 3.5.2 > Reporter: Sam Simmons > Priority: Trivial > > The MD5 sum does not match the tar gzip binary in > http://archive.apache.org/dist/maven/maven-3/3.5.2/binaries/. It looks like > both the md5 and shasum were updated 3 days after the archives were added. > Please upload the correct checksums. > Provided MD5 sum 948110de4aab290033c23bf4894f7d9a > apache-maven-3.5.2-bin.tar.gz.md5 > Actual MD5 sum 6edf85f3e282e248db38b44ceb123bd0 apache-maven-3.5.2-bin.tar.gz > Thanks! -- This message was sent by Atlassian JIRA (v6.4.14#64029)