[Boxbackup-dev] MD5 Typo on http://boxbackup.org/trac/wiki/BetaReleases

Peter Jalajas, GigaLock Backup Services pjalajas at gigalock.com
Thu Sep 8 23:33:50 BST 2011


Hi Chris,

I was about to run FOSSology on
http://www.boxbackup.org/svn/box/packages/boxbackup-0.11rc8.tgz
as pointed to by
http://boxbackup.org/trac/wiki/BetaReleases
where I see this:
Current Status
Release Candidate 8 for Box Backup 0.11 (version 0.11rc8):
    Re-released on 01 May 2010.
    Download here
    Signed by Chris Wilson <chris+gpgkey@…>, key ID  31197862
    MD5 checksum: 996155124cab2a4ed3ba15399bfde5f9
For me, the Signature verifies fine, but the MD5 checksum does not match.
Details below.
I presume that that just needs updating.
Thanks,
Pete

user at svr:/media/dir/home/user$ gpg --verify Downloads/boxbackup-0.11rc8.tgz.asc
gpg: Signature made Mon 20 Jun 2011 06:09:40 PM EDT using DSA key ID 31197862
gpg: Can't check signature: public key not found
user at svr:/media/dir/home/user$ gpg --recv-keys 31197862
gpg: requesting key 31197862 from hkp server keys.gnupg.net
gpg: key 31197862: public key "Chris Wilson <chris+gpgkey at qwirx.com>" imported
gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
gpg: depth: 0  valid:   1  signed:   2  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: depth: 1  valid:   2  signed:   0  trust: 2-, 0q, 0n, 0m, 0f, 0u
gpg: Total number processed: 1
gpg:               imported: 1
user at svr:/media/dir/home/user$ gpg --verify Downloads/boxbackup-0.11rc8.tgz.asc
gpg: Signature made Mon 20 Jun 2011 06:09:40 PM EDT using DSA key ID 31197862
gpg: Good signature from "Chris Wilson <chris+gpgkey at qwirx.com>"
gpg:                 aka "[jpeg image of size 3313]"
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: DF7E 428C 217B 2E8E 37BD  B8EF BBB9 B798 3119 7862
user at svr:/media/dir/home/user$ md5sum Downloads/boxbackup-0.11rc8.tgz
c88405ed90de0f032b783f6a66fdb28d  Downloads/boxbackup-0.11rc8.tgz
user at svr:/media/dir/home/user$ gpg --print-md md5
Downloads/boxbackup-0.11rc8.tgz
Downloads/boxbackup-0.11rc8.tgz: C8 84 05 ED 90 DE 0F 03  2B 78 3F 6A
66 FD B2 8D
user at svr:/media/dir/home/user$



More information about the Boxbackup-dev mailing list