The expected MD5 is what's listed in the Fink .info file for the
package. The actual MD5 is what you get if you run
md5 tarball
so they won't change. The error message is actually somewhat
misleading--another very frequent cause for this is the upstream site
changing something in their
(Relaying this to the list as the maintainer didn't respond yet -- in
case anybody else wants to pitch in.)
See below.
OBTW, it would be nice if temporarily broken packages would not block
a fink update-all -- as it is, the update each time breaks on
C-Kermit (as it is alphabetically first?) and