From owner-freebsd-ports@FreeBSD.ORG Sun Jan 28 20:13:58 2007 Return-Path: X-Original-To: ports@freebsd.org Delivered-To: freebsd-ports@FreeBSD.ORG Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id DD7F416A400 for ; Sun, 28 Jan 2007 20:13:58 +0000 (UTC) (envelope-from pauls@utdallas.edu) Received: from mail.stovebolt.com (mail.stovebolt.com [66.221.101.249]) by mx1.freebsd.org (Postfix) with ESMTP id B751013C441 for ; Sun, 28 Jan 2007 20:13:58 +0000 (UTC) (envelope-from pauls@utdallas.edu) Received: from [192.168.2.102] (adsl-65-69-141-175.dsl.rcsntx.swbell.net [65.69.141.175]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mail.stovebolt.com (Postfix) with ESMTP id D5160114307; Sun, 28 Jan 2007 14:06:19 -0600 (CST) Date: Sun, 28 Jan 2007 14:13:51 -0600 From: Paul Schmehl To: Pekka Riikonen Message-ID: <103D5836493CBF0EACA17AE1@paul-schmehls-powerbook59.local> In-Reply-To: References: <3B27E5D772A78D81D72D9420@paul-schmehls-powerbook59.local> <20070128014441.GA76439@atarininja.org> <20070128024514.GA79142@atarininja.org> <2A54A37FBF8B6E7EE4DEAA5F@paul-schmehls-powerbook59.local> <20070128033157.GB79646@atarininja.org> X-Mailer: Mulberry/4.0.7b1 (Mac OS X) MIME-Version: 1.0 Content-Type: multipart/signed; micalg=sha1; protocol="application/pkcs7-signature"; boundary="==========CD3AFD0E86C586C0B559==========" X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: "Freebsd Ports: Archivers" , security@silcnet.org, aquatique-ports@rambler.ru Subject: Re: Problem with devel/silc-toolkit X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 28 Jan 2007 20:13:59 -0000 --==========CD3AFD0E86C586C0B559========== Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: quoted-printable Content-Disposition: inline --On January 28, 2007 9:55:42 AM +0100 Pekka Riikonen =20 wrote: > : > Thanks for letting us know about these issues, but we have not updated > the files at silcnet.org since they were put up there. They were last > modified Dec 19 2005. I suspect you had some local problem or download > problem or some mirror was corrupted. I also verified the files this > morning and the md5sums are as follows: > Well now you have me even more concerned. I downloaded the file directly=20 from silcnet.org using both the port and ftp, and I also downloaded the=20 file on my Mac here at home using ftp to pull the file both from the http=20 and the ftp download sites. In all four cases, the md5sum and the sha256=20 sum did not match the file that was downloaded. Furthermore, the size of=20 the file was a meg less than it was supposed to be. Then, while I was downloading copies from some of the mirrors to check=20 them, the file from silcnet.org suddenly matched the md5sum and the size=20 of the legitimate file. While it's entirely possible that *both* my=20 FreeBSD box *and* my Mac were somehow screwed up, it's hard to believe=20 that *multiple* downloads on both boxes would arrive at the same results=20 and then suddenly they would change, yet nothing changed at the=20 distribution site. It's certainly odd enough to warrant a thorough=20 investigation, I would think. There was obviously a problem somewhere, but I'm not convinced it was on=20 both of my boxes and nowhere else. Paul Schmehl (pauls@utdallas.edu) Senior Information Security Analyst The University of Texas at Dallas http://www.utdallas.edu/ir/security/ --==========CD3AFD0E86C586C0B559==========--