Digital certificate issue: mismatched sha1 and md5 checksums

Pleiade - security <[email protected]>
Newsgroups gmane.network.freenet.support
Message-ID <[email protected]>
The digital signature of the "Freenet 0.7.5. installer" from "checksums.freenetproject.org" could not be verified. It is ostensibly signed by "Matthew Toseland".

The Fingerprints given in the certificate do not match the file, viz:

On console:
***/Downloads/freenet.jnlp 
SHA1(/***l/Downloads/freenet.jnlp)= 57f92da76b5f29f3cbed6eb1acd46b32017a1e1f
***:~ *** /***l/Downloads/freenet.jnlp 
MD5 (/***/Downloads/freenet.jnlp) = 9b18c6e7199e8f85ad5a72ab85863cb6

My questions:
1. Is this an issue?
2. I am being a 'bit/lot' thick/paranoid?
------------------------------------------------------------------------

Pleiade Associates

Pleiade | www.pleiade.org

------------------------------------------------------------------------


_______________________________________________
Support mailing list
[email protected]
http://news.gmane.org/gmane.network.freenet.support
Unsubscribe at http://emu.freenetproject.org/cgi-bin/mailman/listinfo/support
Or mailto:support-request-RdDMkVZAZeuJnvDnx1genB2eb7JE58TQ@public.gmane.org?subject=unsubscribe
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.