On 2018-04-11, Peter J. Philipp <p...@centroid.eu> wrote: > Sorry to be writing this twice. Not my day. > > The complete path where I downloaded this from was > https://ftp.eu.openbsd.org/pub/OpenBSD/snapshots/amd64/install63.iso > > including the SHA256.sig which I check against. > > Also: > > beta$ dig ftp.eu.openbsd.org +short > 18.104.22.168 > beta$ dig ftp.eu.openbsd.org +short aaaa > 2001:700:3:4017::100 > > that is in my DNS cache is this all correct? > > Best Regards, > > -peter > > > On 04/11/18 19:54, Peter J. Philipp wrote: >> Hi, >> >> I just downloaded this install63.iso from https://ftp.eu.openbsd.org: >> >> beta$ signify -C -p /etc/signify/openbsd-63-base.pub \ >>> -x SHA256.sig bsd >> Signature Verified >> bsd: OK >> beta$ signify -C -p /etc/signify/openbsd-63-base.pub \ >>> -x SHA256.sig install63.iso >> Signature Verified >> install63.iso: FAIL >> beta$ sha256 -C SHA256 install63.iso >> >> (SHA256) install63.iso: FAILED >> >> What's going on ? Why has the checksum failed? >> >> Regards, >> -peter > >
A new snapshot may have been produced while the files were transferring, so SHA256.sig is from one snapshot and install63.iso from another. If you try another mirror at the same time and get the same error and file contents from both, it's quite likely that is what happened.