Hi,

the corrected archive is still broken:

On Dec  3 18:53, Matt Caswell wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
> 
>    Due to an error in the release process the original distribution
> downloads were failing to build. New downloads have now been made
> available on the website. Corrected checksums are given below.
> 
>    OpenSSL version 1.0.2e released
>    ===============================
> 
>    OpenSSL - The Open Source toolkit for SSL/TLS
>    http://www.openssl.org/
> 
>    The OpenSSL project team is pleased to announce the release of
>    version 1.0.2e of our open source toolkit for SSL/TLS. For details
>    of changes and known issues see the release notes at:
> 
>         http://www.openssl.org/news/openssl-1.0.2-notes.html
> 
>    OpenSSL 1.0.2e is available for download via HTTP and FTP from the
>    following master locations (you can find the various FTP mirrors
> under
>    http://www.openssl.org/source/mirror.html):
> 
>      * http://www.openssl.org/source/
>      * ftp://ftp.openssl.org/source/
> 
>    The distribution file name is:
> 
>     o openssl-1.0.2e.tar.gz
>       Size: 5256555
>       MD5 checksum: 5262bfa25b60ed9de9f28d5d52d77fc5
>       SHA1 checksum: 2c5691496761cb18f98476eefa4d35c835448fb6
>       SHA256 checksum:
> e23ccafdb75cfcde782da0151731aa2185195ac745eea3846133f2e05c0e0bff

This archive has invalid symlinks:

$ sha256sum openssl-1.0.2e.tar.gz 
e23ccafdb75cfcde782da0151731aa2185195ac745eea3846133f2e05c0e0bff  
openssl-1.0.2e.tar.gz
$ tar tvzf openssl-1.0.2e.tar.gz  | grep '^l' | head -3
lrwxrwxrwx openssl/openssl     0 2015-12-03 15:44 openssl-1.0.2e/apps/md4.c -> 
openssl-1.0.2e/../crypto/md4/md4.c
lrwxrwxrwx openssl/openssl      0 2015-12-03 15:44 openssl-1.0.2e/test/bftest.c 
-> openssl-1.0.2e/../crypto/bf/bftest.c
lrwxrwxrwx openssl/openssl      0 2015-12-03 15:44 openssl-1.0.2e/test/bntest.c 
-> openssl-1.0.2e/../crypto/bn/bntest.c

Compare with openssl-1.0.2d:

$ tar tvzf openssl-1.0.2d.tar.gz openssl-1.0.2d | grep '^l' | head -3
lrwxrwxrwx openssl/openssl     0 2015-07-09 14:03 openssl-1.0.2d/apps/md4.c -> 
../crypto/md4/md4.c
lrwxrwxrwx openssl/openssl      0 2015-07-09 14:03 
openssl-1.0.2d/include/openssl/aes.h -> ../../crypto/aes/aes.h
lrwxrwxrwx openssl/openssl      0 2015-07-09 14:03 
openssl-1.0.2d/include/openssl/asn1.h -> ../../crypto/asn1/asn1.h


Corinna

-- 
Corinna Vinschen
Cygwin Maintainer
Red Hat

Attachment: pgpxiybGYtpIm.pgp
Description: PGP signature

_______________________________________________
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Reply via email to