https://bugs.kde.org/show_bug.cgi?id=451486
--- Comment #8 from Tian <tianswo...@fedoraproject.org> --- (In reply to Ben Cooksley from comment #6) > If you take the URLs for download.kde.org you can add '.mirrorlist' to > receive a nice page with various information - including MD5, SHA-1 and > SHA-256 hashes of the files. > These hashes are always served directly by download.kde.org and you will not > find those files on the mirrors. Yes, one can find detailed and nice information by click the 'Details' link on the right side of the page[1]. This page lists the link you mentioned. At the bottom of the page, you will see a standalone md5sum.txt link. The hash in this page is not the same as the one in 'Details' link. All these information are from download.kde.org, not a mirror site. I can use sha-256 to check the file. But the purpose of this bug report is to find out what causes the difference and how to fix it in the future, though I am not a contributor of KDE. [1] https://download.kde.org/stable/krita/5.0.2/ -- You are receiving this mail because: You are watching all bug changes.