Re: OpenSSH 4.0 released

On Wed, Mar 09, 2005 at 06:11:22PM +0100, Rainer Peter Feller wrote:
> On Wed, 2005-03-09 at 02:54 -0700, Damien Miller wrote:
> <SNIP>
>
> > Checksums:
> > ==========
> >
> > - MD5 (openssh-4.0.tgz) = 7dbf15fe7c294672e8822127f50107d0
> > - MD5 (openssh-4.0p1.tar.gz) = 122bec49d2cace00b71cc29b5ececed3

> whups! I got 7b36f28fc16e1b7f4ba3c1dca191ac92 for openssh-4.0p1.tar.gz ???
> what is wrong?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

In short, the MD5 signature for the Portable tarball in the release notes
is wrong.  The correct signature is:

7b36f28fc16e1b7f4ba3c1dca191ac92  openssh-4.0p1.tar.gz

There was a last-minute compile fix which require a re-rolling of the
release tarballs.

I have confirmed that the signature in the release notes matches the
signature for the tarball without that fix, that the the tarball on the
FTP site contains the fix and that the only difference between the two is
the aforementioned fix.  I have also confirmed a good gpg signature from
djm.

The online version of the release notee has also been corrected and will
appear at http://www.openssh.com/txt/release-4.0 shortly.

Apologies to all for the confusion.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (OpenBSD)

iD8DBQFCL1Y4yYKAx4/0+mkRAiAAAJ9J/It/MkUrnjjBHmTV4zed/fH+jwCg1krg
uchwZKbkVciEQGzB8rBXiUc=
=RXLr
-----END PGP SIGNATURE-----

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.