Thomas Freller created LOG4J2-3318:
--------------------------------------
Summary: SHA265 Checksum on Download Page not correct
Key: LOG4J2-3318
URL: https://issues.apache.org/jira/browse/LOG4J2-3318
Project: Log4j 2
Issue Type: Bug
Reporter: Thomas Freller
I tried to check the checksum and got a different result.
{code:java}
pi@raspberrypi:~/1 $ wget
https://downloads.apache.org/logging/log4j/2.17.1/apache-log4j-2.17.1-bin.tar.gz.sha512
--2022-01-05 09:47:55--
https://downloads.apache.org/logging/log4j/2.17.1/apache-log4j-2.17.1-bin.tar.gz.sha512
Resolving downloads.apache.org (downloads.apache.org)... 2a01:4f9:3a:2c57::2,
2a01:4f8:10a:201a::2, 135.181.214.104, ...
Connecting to downloads.apache.org
(downloads.apache.org)|2a01:4f9:3a:2c57::2|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 128 [text/plain]
Saving to:
‘apache-log4j-2.17.1-bin.tar.gz.sha512’apache-log4j-2.17.1-bin.tar.gz.s
100%[==========================================================>] 128
--.-KB/s in 0s2022-01-05 09:47:55 (79.4 MB/s) -
‘apache-log4j-2.17.1-bin.tar.gz.sha512’ saved [128/128]
pi@raspberrypi:~/1 $ wget
https://downloads.apache.org/logging/log4j/2.17.1/apache-log4j-2.17.1-bin.tar.gz
--2022-01-05 09:47:59--
https://downloads.apache.org/logging/log4j/2.17.1/apache-log4j-2.17.1-bin.tar.gz
Resolving downloads.apache.org (downloads.apache.org)... 2a01:4f9:3a:2c57::2,
2a01:4f8:10a:201a::2, 135.181.214.104, ...
Connecting to downloads.apache.org
(downloads.apache.org)|2a01:4f9:3a:2c57::2|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 13947943 (13M) [application/x-gzip]
Saving to: ‘apache-log4j-2.17.1-bin.tar.gz’apache-log4j-2.17.1-bin.tar.gz
100%[==========================================================>] 13.30M
6.40MB/s in 2.1s2022-01-05 09:48:01 (6.40 MB/s) -
‘apache-log4j-2.17.1-bin.tar.gz’ saved [13947943/13947943]
pi@raspberrypi:~/1 $ sha256sum -c ./apache-log4j-2.17.1-bin.tar.gz.sha512
sha256sum: ./apache-log4j-2.17.1-bin.tar.gz.sha512: no properly formatted
SHA256 checksum lines found
pi@raspberrypi:~/1 $ cat ./apache-log4j-2.17.1-bin.tar.gz.sha512
b7e948df6c6f57d903d990de2cc0270c1537b711285e9b6b91280db6ace38418fced713785b2c20512dd9a4238c2d1d0ceb414d9936df2ca110ff14993ae04dc
pi@raspberrypi:~/1 $ sha256sum apache-log4j-2.17.1-bin.tar.gz
b876c20c9d318d77a39c0c2e095897b2bb1cd100c7859643f8c7c8b0fc6d5961
apache-log4j-2.17.1-bin.tar.gz
Also the documented
gpg --print-md SHA256 apache-log4j-2.17.1-bin.tar.gz
gpg: keybox '/home/pi/.gnupg/pubring.kbx' created
apache-log4j-2.17.1-bin.tar.gz: B876C20C 9D318D77 A39C0C2E 095897B2 BB1CD100
C7859643 F8C7C8B0 FC6D5961
doesn't match{code}
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
