https://bz.apache.org/bugzilla/show_bug.cgi?id=65665

            Bug ID: 65665
           Summary: signature file for source tarball has incorrect file
                    name in it
           Product: Apache httpd-2
           Version: 2.4.51
          Hardware: All
                OS: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Build
          Assignee: bugs@httpd.apache.org
          Reporter: mehul.sang...@gmail.com
  Target Milestone: ---

When trying to use `sha256sum --check` to verify the tar.gz I get the
following:

% sha256sum --check httpd-2.4.51.tar.gz.sha256
sha256sum: httpd-2.4.51-rc1.tar.gz: No such file or directory
httpd-2.4.51-rc1.tar.gz: FAILED open or read
sha256sum: WARNING: 1 listed file could not be read

% cat httpd-2.4.51.tar.gz.sha256
c2cedb0b47666bea633b44d5b3a2ebf3c466e0506955fbc3012a5a9b078ca8b4
*httpd-2.4.51-rc1.tar.gz

As can be seen, the filename listed in the signature file is wrong.

If anyone is doing automated signature verification, that is going to fail for
no reason as the signature is correct, only the filename is wrong.

This is also true for the tar.bz2 signature.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org
For additional commands, e-mail: bugs-h...@httpd.apache.org

Reply via email to