[
https://issues.apache.org/jira/browse/MNGSITE-347?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16583960#comment-16583960
]
Jean-Patrick BOYET edited comment on MNGSITE-347 at 8/17/18 2:11 PM:
---------------------------------------------------------------------
Hi,
The .md5 files have changed to .sh1 since I created this ticket.
The archive with .md5 I checked was only to verify the tools and method used
to verify the checksum.
Sothis ticket can be closed due to migration of .md5 to .sha1 checksum files on
the download page.
Regards.
JP
PS: the .md5 file I download was a link like:
[https://www.apache.org/dist/maven/maven-3/3.5.4/binaries/apache-maven-3.5.4-bin.zip.md5]
which gave me directly in navigator the value:
8a0d9cc9d4da3fac195de8e1e99fe07158d54192
I did not load it as a file on my computer.
Now if you use this link you can have a correct value as:
235db716537989e9e949e5bf23f965c0
witch match the md5 of the file: apache-maven-3.5.4-bin.zip
[apache-maven-3.5.4-bin.tar.gz.md5
|https://www.apache.org/dist/maven/maven-3/3.5.4/binaries/apache-maven-3.5.4-bin.tar.gz.md5]updated
2018-06-17 19:05 32
The download page has been changed : Last Published: 2018-08-17
it seems that the link to .MD5 has been changed to .sha1 link on the download
page, but others checksum availables at:
[https://www.apache.org/dist/maven/maven-3/3.5.4/binaries/]
was (Author: tiptopflite):
Hi,
The .md5 files have changed to .sh1 since I created this ticket.
The archive with .md5 I checked was only to verify the tools and method used
to verify the checksum.
Sothis ticket can be closed due to migration of .md5 to .sha1 checksum files on
the download page.
Regards.
JP
PS: the .md5 file I download was a link like:
[https://www.apache.org/dist/maven/maven-3/3.5.4/binaries/apache-maven-3.5.4-bin.zip.md5]
which gave me directly in navigator the value:
8a0d9cc9d4da3fac195de8e1e99fe07158d54192
I did not load it as a file on my computer.
Now if you use this link you can have a correct value as:
235db716537989e9e949e5bf23f965c0
witch match the md5 of the file: apache-maven-3.5.4-bin.zip
The download page has been changed : Last Published: 2018-08-17
it seems that the link to .MD5 has been changed to .sha1 link
> Maven Download page : MD5 not match the download
> ------------------------------------------------
>
> Key: MNGSITE-347
> URL: https://issues.apache.org/jira/browse/MNGSITE-347
> Project: Maven Project Web Site
> Issue Type: Bug
> Environment: Windows
> Reporter: Jean-Patrick BOYET
> Priority: Trivial
> Labels: security
>
> Dear All,
> After dowloading the latest maven release from:
> [http://maven.apache.org/download.cgi]
> with the following link:
> [http://mirror.ibcp.fr/pub/apache/maven/maven-3/3.5.4/binaries/apache-maven-3.5.4-bin.zip]
> and verifying the MD5 checksum with both MD5 and WinMD5Free, they do not
> match:
> 235db716537989e9e949e5bf23f965c0 # 8a0d9cc9d4da3fac195de8e1e99fe07158d54192
> trying with other mirror: the same.
> Verifying with older version:
> [https://archive.apache.org/dist/maven/binaries/apache-maven-3.2.2-bin.zip]
> and
> [https://archive.apache.org/dist/maven/binaries/apache-maven-3.2.2-bin.zip.md5]
> They match !
>
> MD5 not updated on the download page ?
> Regards
>
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
