MySQL downloads site hacked? SSL errors downloading MySQL
Stewart Smith <[email protected]> Fri, 05 Oct 2012 16:10:54 +1000
| Newsgroups | gmane.comp.db.mysql.devel |
|---|---|
| Message-ID | <[email protected]> |
Seeing as the bugs DB just isn't letting me actually submit this as a bug, I'll post it here. Attempting to pull the latest 5.6.7 source tarball from: https://cdn.mysql.com/Downloads/MySQL-5.6/mysql-5.6.7-rc.tar.gz (following links from dev.mysql.com) I get a big warning about SSL certificates: "You attempted to reach cdn.mysql.com, but instead you actually reached a server identifying itself as a248.e.akamai.net. This may be caused by a misconfiguration on the server or by something more serious. An attacker on your network could be trying to get you to visit a fake (and potentially harmful) version of cdn.mysql.com. You should not proceed, especially if you have never seen this warning before for this site." The https connection to dev.mysql.com is okay, it's just once things start to go towards the CDN that things go awry. I'm likely more paranoid than others and stop here. It would be great if this could be fixed and we don't have to live in fear of the trojaned MySQL download. I've tried this through several connections, including via Tor (and with a couple of browsers). -- Stewart Smith
signature.asc
(application/pgp-signature, 835 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQIcBAEBAgAGBQJQbnnuAAoJEP08notdpDyvU3gQAJcYQguL16ExtFEkVuOq4mN4 6KPDCuT09Tn7Cw8y3FYKYmx4sm2FmxLNyo+7oA6zYCUWHOjxIzvQCY66MdglFPLC 9J5YFZIoJP5CtJIJW50mV6KkvVzqfTZa32/CYIzJ1RbySmrdxKI/x0ohu5GspdBc grtomN9e5vEOceFDVT8n65uOrrr/wgrMCYnOGKs/+xlEUbi8Tbqw6Z5MTBdygpWz zsOC+94Mq9VUXzBA7hrYVJGrNxDezF/SfUNMNJYFRLgpAWy8eayGKEqWkzTKHm04 PjpykhxY9Bce2sKaUDvij+IpQAXz0D6Nbi0mbb1BH3tTjwKXcT2Br54S00/KyD7I RqgcmMydp5rX+22Ug6iXm+u5pPyo/TVnok+dOihNmoqbPVZT//07VemxP4zguLwr 6iVowSh/QrTcTzdlzpkqQywJY/OoE1MSfaNQ1/DlWCJybW+/XxO+69684r7ucdpC +1+H39sl4yz9e2fVTWPmGxs3LNcmkw/rsGUUzIRROqTGC+tRD6dHhWkQqZ5iE99d PGrq8iDDMwCovaZt1hlFNeX3NZZ3o3LdOWylPGUm/gpNB2xYi6FUhB7V5IoSk3qD Pu1I9M8WoOYNKOaT3hBqv26D8STZNS4WKtAgXBEVNK0B2l2/iNgZGl1qeNPX5tBM onCEZtOCwpuBbj0t4HeP =cJkV -----END PGP SIGNATURE-----