Re: Digital certificate issue: mismatched sha1 and md5 checksums
Matthew Toseland <toad-EI5O+8PHWbJeeLb3ft/[email protected]>
| Newsgroups | gmane.network.freenet.support |
|---|---|
| Message-ID | <[email protected]> |
On Thursday 05 Apr 2012 12:52:41 Pleiade - security wrote: > The digital signature of the "Freenet 0.7.5. installer" from "checksums.freenetproject.org" could not be verified. It is ostensibly signed by "Matthew Toseland". > > The Fingerprints given in the certificate do not match the file, viz: > > On console: > ***/Downloads/freenet.jnlp > SHA1(/***l/Downloads/freenet.jnlp)= 57f92da76b5f29f3cbed6eb1acd46b32017a1e1f > ***:~ *** /***l/Downloads/freenet.jnlp > MD5 (/***/Downloads/freenet.jnlp) = 9b18c6e7199e8f85ad5a72ab85863cb6 > > My questions: > 1. Is this an issue? > 2. I am being a 'bit/lot' thick/paranoid? Is this still broken? I'm not sure I understand what it is that is broken - jnlp is just a text file pointing to other files, for example. _______________________________________________ Support mailing list [email protected] http://news.gmane.org/gmane.network.freenet.support Unsubscribe at http://emu.freenetproject.org/cgi-bin/mailman/listinfo/support Or mailto:support-request-RdDMkVZAZeuJnvDnx1genB2eb7JE58TQ@public.gmane.org?subject=unsubscribe
signature.asc
(application/pgp-signature, 198 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iEYEABEIAAYFAlAatsIACgkQYUNbc3WUHYiUwwCfc0XUTEbk48mjdg+ATd4c5taG ZkEAnjCZiQig5v8pN2cYknZDe3NZzlfQ =kdPF -----END PGP SIGNATURE-----