On Mon, Apr 03, 2017 at 11:25:54AM +0100, Paul Barker wrote:
> Hi,
> 
> It looks like the checksum of the following file has changed recently:
>     https://www.kernel.org/pub/software/network/ethtool/ethtool-4.8.tar.gz
> 
> Original checksum from around 23/10/2016:
>     md5sum = 28c4a4d85c33f573c49ff6d81ec094fd
>     sha256sum = 
> 1bd82ebe3d41de1b7b0d8f4fb18a8e8466fba934c952bc5c5002836ffa8bb606
> 
> Current checksum:
>     md5sum = 992eab97607c64b7848edfd37f23da22
>     sha256sum = 
> c8ea20b8d85898377ec130066008f9241ebcdd95ac85dbcc2d50b32fe2e2f934
> 
> Is this change intentional?
> 
> I've spotted this when doing an OpenEmbedded build, it's rejecting the
> ethtool-4.8.tar.gz file as corrupted since the checksums do not match those
> originally recorded.
> 
> Thanks,
> Paul Barker

Yes, the .tar.gz file got regenerated locally as I was tinkering with
the release scripts that I inherited from the former ethtool maintainer,
and the regenerated .tar.gz file got uploaded. The newly updated one
is properly signed and the signature is there to verify. (Note that
the signature is against the .tar file and not the .tar.gz file.)

I downloaded the file from the website and verified against the
matching version of the git tree locally as well. If you have any idea
as to who is in charge of the OpenEmbedded build and can correct/remove
this complaint, then please let me know and/or have them contact me.
(Ditto for Yocto builds...)

Thanks,

John
-- 
John W. Linville                Someday the world will need a hero, and you
linvi...@tuxdriver.com                  might be all we have.  Be ready.

Reply via email to