>Number:         12247
>Category:       pkg
>Synopsis:       MD5 checksum for fressh-0.8 does not match in pkgsrc
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Feb 19 12:52:00 PST 2001
>Closed-Date:
>Last-Modified:
>Originator:     Greg A. Woods
>Release:        pkgsrc-2001/
>Organization:
Planix, Inc.; Toronto, Ontario; Canada
>Environment:
	
System: NetBSD proven 1.5F NetBSD 1.5F (PROVEN) #2: Fri Nov 24 19:18:42 EST 2000 woods@proven:/work/woods/NetBSD-src/sys/arch/i386/compile/PROVEN i386


>Description:

	seems there's a discrepancy between the registered MD5 checksum
	for FreSSH-0.8 and the actual download.....

>How-To-Repeat:

	$ make
	=> fressh-0.8.tar.bz2 doesn't seem to exist on this system.
	=> Attempting to fetch fressh-0.8.tar.bz2 from http://www.fressh.org/.
	Requesting http://www.fressh.org/fressh-0.8.tar.bz2
	  (via proxy.ym1.on.wave.home.com:8080)
	100% |**************************************************************************|   107 KB   45.25 KB/s    00:00 ETA
	=> Checksum mismatch for fressh-0.8.tar.bz2.
	Make sure the Makefile and md5 file (/work/woods/m-NetBSD-pkgsrc/security/fressh/files/md5)
	are up to date.  If you want to override this check, type
	"make NO_CHECKSUM=yes [other args]".
	*** Error code 1
	
	Stop.
	$ cvs -q update		# from locally rsync'ed CVS repository....
	$ ls -list
	total 10
	23221 2 drwxr-xr-x  2 woods  wheel  512 Feb 19 14:09 CVS
	17802 2 -rw-r--r--  1 woods  wheel  343 Feb 17 12:49 Makefile
	34447 2 drwxr-xr-x  3 woods  wheel  512 Feb 19 14:09 files
	54242 2 drwxr-xr-x  3 woods  wheel  512 Feb 19 14:09 patches
	65069 2 drwxr-xr-x  3 woods  wheel  512 Feb 19 14:09 pkg
	$ ls -list files
	total 6
	37336 2 drwxr-xr-x  2 woods  wheel  512 Feb 19 14:09 CVS
	34470 2 -rw-r--r--  1 woods  wheel  114 Feb 12 11:15 md5
	34619 2 -rw-r--r--  1 woods  wheel  110 Feb 12 11:15 patch-sum
 
[[....]]

	ftp> dir files
	229 Entering Extended Passive Mode (|||61233|)
	150 Opening ASCII mode data connection for '/bin/ls'.
	total 3
	drwxrwxr-x  2 234  netbsd  512 Feb 13 04:47 CVS
	-rw-r--r--  1 234  netbsd  114 Feb 12 08:15 md5
	-rw-r--r--  1 234  netbsd  110 Feb 12 08:15 patch-sum


>Fix:

	the obvious "make NO_CHECKSUM=yes" may be a very bad idea,
	depending on the cause of this discrepancy....
>Release-Note:
>Audit-Trail:
>Unformatted: