Am 08.12.2016 um 12:24 schrieb sebb: > Works OK for me, hashes and sigs > > How did you download the files? > > I have noticed that some browsers automatically unpack archives and > it's not unknown for some to silently truncate the download. > Check the file sizes. Your theory seems to be correct. With Firefox (my version is 50.0.2), zip files seem to be somehow manipulated. I tried with Chrome, and here the signature checks are successful.
This must be a pretty new "feature" of Firefox; I always used it in the past. Interestingly, the downloaded archives are not corrupt; they can be opened with 7zip. Sorry for the noise. Oliver > > > On 8 December 2016 at 07:58, Gilles <[email protected]> wrote: >> On Wed, 7 Dec 2016 21:39:02 +0100, Oliver Heger wrote: >>> >>> Hi, >>> >>> something seems to be wrong with the zip artifacts for both the source >>> and the binary distributions. The checks for the signature and the md5 >>> sums fail for me. >> >> >> What about the ".sha1" check? >> >> Gilles >> >> >>> The tar.gz files are okay. >>> >>> Does anybody else have the same problems? >>> >>> Oliver >>> >>> Am 07.12.2016 um 00:22 schrieb Gilles: >>>> >>>> Hi. >>>> >>>> This is a [VOTE] for releasing Apache Commons RNG 1.0 (from RC6). >>>> >>>> >>>> Tag name: >>>> RNG_1_0_RC6 (signature can be checked from git using 'git tag -v') >>>> >>>> Tag URL: >>>> >>>> >>>> >>>> https://git-wip-us.apache.org/repos/asf?p=commons-rng.git;a=commit;h=4581a4520315657a4219b37c81f5db80e4a4e43c >>>> >>>> >>>> Commit ID the tag points at: >>>> 4581a4520315657a4219b37c81f5db80e4a4e43c >>>> >>>> Site: >>>> http://home.apache.org/~erans/commons-rng-1.0-RC6-site >>>> >>>> Distribution files (committed at revision 17284): >>>> https://dist.apache.org/repos/dist/dev/commons/rng/ >>>> >>>> Distribution files hashes (SHA1): >>>> c5e70a523160ed848194eeba0efa2b14d23c7a61 >>>> commons-rng-1.0-bin.tar.gz.sha1 >>>> 66d7701afc90aafa4c4b6e033b8df6cd84365161 commons-rng-1.0-bin.zip.sha1 >>>> ef56543c8882a0e4771de83ecf8b3be190f122cf >>>> commons-rng-1.0-src.tar.gz.sha1 >>>> 3dc56b0793d8bbd703a4efa68547eb58f6fb5b35 commons-rng-1.0-src.zip.sha1 >>>> >>>> KEYS file to check signatures: >>>> http://www.apache.org/dist/commons/KEYS >>>> >>>> Maven artifacts: >>>> >>>> https://repository.apache.org/content/repositories/orgapachecommons-1229/ >>>> >>>> Please select one of the following options[1]: >>>> [ ] +1 Release it. >>>> [ ] +0 Go ahead; I don't care. >>>> [ ] -0 There are a few minor glitches: ... >>>> [ ] -1 No, do not release it because ... >>>> >>>> This vote will be open at least 72 hours, i.e. until 2016-12-10T00:00:00Z >>>> (this is UTC time). >>>> ---------- >>>> >>>> >>>> Regards, >>>> Gilles >>>> >>>> [1] http://apache.org/foundation/voting.html >>>> >>>> >> >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: [email protected] >> For additional commands, e-mail: [email protected] >> > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
