MySQL downloads site hacked? SSL errors downloading MySQL

Stewart Smith <[email protected]> Fri, 05 Oct 2012 16:10:54 +1000
Newsgroups gmane.comp.db.mysql.devel
Message-ID <[email protected]>
Seeing as the bugs DB just isn't letting me actually submit this as a
bug, I'll post it here.

Attempting to pull the latest 5.6.7 source tarball from:
https://cdn.mysql.com/Downloads/MySQL-5.6/mysql-5.6.7-rc.tar.gz

(following links from dev.mysql.com)

I get a big warning about SSL certificates:
"You attempted to reach cdn.mysql.com, but instead you actually reached
a server identifying itself as a248.e.akamai.net. This may be caused by
a misconfiguration on the server or by something more serious. An
attacker on your network could be trying to get you to visit a fake (and
potentially harmful) version of cdn.mysql.com.

You should not proceed, especially if you have never seen this warning
before for this site."

The https connection to dev.mysql.com is okay, it's just once things
start to go towards the CDN that things go awry.

I'm likely more paranoid than others and stop here. It would be great if
this could be fixed and we don't have to live in fear of the trojaned
MySQL download.


I've tried this through several connections, including via Tor (and with
a couple of browsers).

-- 
Stewart Smith
signature.asc (application/pgp-signature, 835 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=cJkV
-----END PGP SIGNATURE-----