MD5s of setup.exe on mirrors.
Fri May 11 21:42:00 GMT 2007
> On Fri, May 11, 2007 at 12:58:59PM -0700, Alexander Sotirov wrote:
>>> Cygwin mirrors have in their toplevel a setup.exe and an md5.sum. The
>>> m5sum is
>>> ae1944f528338033bab3b4710d5bd736 setup.bz2
>>> b31ddcef84f25919a5d3184167b4a90d setup.exe
>>> 0503889504b7ff0b23e65586a522b3ad setup.ini
>>> whereas the setup.exe has actually the md5sum:
>>> I checked that for ftp://mirror.switch.ch/mirror/cygwin/setup.exe and
>>> and some others.
>>I reported this in January: http://cygwin.com/ml/cygwin/2007-02/msg00006.html
>>Nobody seemed to care. Considering the fact that MD5 collisions are now trivial
>>to generate, it probably doesn't matter much anyways - the fact that your copy
>>of setup.exe has the right MD5 doesn't mean that it hasn't been tampered with.
> We don't control the content of mirrors.
> If you think this is an issue, contact the mirror(s) in question.
I've only checked some mirrors. Since all have those same setup.exe,
my idea was, that it would be the original (do I even have access to
that -- I think I'm supposed not to dowloed from there?) server which
is also carrying this other executable.
Therefore my advice to check there (and I trust you're controlling the
master server?), but of course I might be totally confused and
mistaking all and everything.
Regards -- Markus
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Problem reports: http://cygwin.com/problems.html
More information about the Cygwin