md5.sum contains outdated checksum for sha512.sum

md5.sum contains outdated checksum for sha512.sum

[Tom de Vries]

Hi,

I noticed these files:
...
https://sourceware.org/ftp/gdb/releases/md5.sum
https://sourceware.org/ftp/gdb/releases/sha512.sum
...

and the fact that they have each other in the checksum list:
...
$ grep sum *.sum
md5.sum:d302bd90c757261f7a869a7a933ae096  sha512.sum
sha512.sum:302d3ee680099da76381af62dc8326bc73bd0f72e31733611458213b582fba4f7596b8892676a530dbd95f4fe2257b3f487048ed0815cceefb81c199a8a92662
 md5.sum
...

Only one matches:
...
$ md5sum sha512.sum
cbf4a5e7311db1d101038a3411a2cf9b  sha512.sum
$ sha512sum md5.sum
302d3ee680099da76381af62dc8326bc73bd0f72e31733611458213b582fba4f7596b8892676a530dbd95f4fe2257b3f487048ed0815cceefb81c199a8a92662
 md5.sum
...

So, AFAICT, md5.sum contains an outdated checksum for sha512.sum (and
AFAIU, as long as the files reference each other, that will be the case).

Thanks,
- Tom

Re: md5.sum contains outdated checksum for sha512.sum

[Tom de Vries]

On 02-10-19 16:53, Tom de Vries wrote:
> Hi,
> 
> I noticed these files:
> ...
> https://sourceware.org/ftp/gdb/releases/md5.sum
> https://sourceware.org/ftp/gdb/releases/sha512.sum
> ...
> 
> and the fact that they have each other in the checksum list:
> ...
> $ grep sum *.sum
> md5.sum:d302bd90c757261f7a869a7a933ae096  sha512.sum
> sha512.sum:302d3ee680099da76381af62dc8326bc73bd0f72e31733611458213b582fba4f7596b8892676a530dbd95f4fe2257b3f487048ed0815cceefb81c199a8a92662
>  md5.sum
> ...
> 
> Only one matches:
> ...
> $ md5sum sha512.sum
> cbf4a5e7311db1d101038a3411a2cf9b  sha512.sum
> $ sha512sum md5.sum
> 302d3ee680099da76381af62dc8326bc73bd0f72e31733611458213b582fba4f7596b8892676a530dbd95f4fe2257b3f487048ed0815cceefb81c199a8a92662
>  md5.sum
> ...
> 
> So, AFAICT, md5.sum contains an outdated checksum for sha512.sum (and
> AFAIU, as long as the files reference each other, that will be the case).

Using shell access, I found that sha512.sum is generated by root (so I
guess that's some site automation):
...
$ ls -la *sum
-rw-rw-r--. 1 gdbadmin gdb  3386 jun  4  2017 md5.sum
-rw-r--r--. 1 root     gdb 11715 sep 20 22:44 sha512.sum
...

So, we should exclude sha512.sum from md5.sum. But sofar, I was not able
to find how this is generated.

Thanks,
- Tom

Re: md5.sum contains outdated checksum for sha512.sum

[Andreas Schwab]

On Okt 05 2019, Tom de Vries <tdevries@suse.de> wrote:

> Using shell access, I found that sha512.sum is generated by root (so I
> guess that's some site automation):
> ...
> $ ls -la *sum
> -rw-rw-r--. 1 gdbadmin gdb  3386 jun  4  2017 md5.sum
> -rw-r--r--. 1 root     gdb 11715 sep 20 22:44 sha512.sum
> ...
>
> So, we should exclude sha512.sum from md5.sum. But sofar, I was not able
> to find how this is generated.

I think md5.sum should just be deleted.  It appears to be obsolete.

Andreas.

-- 
Andreas Schwab, schwab@linux-m68k.org
GPG Key fingerprint = 7578 EB47 D4E5 4D69 2510  2552 DF73 E780 A9DA AEC1
"And now for something completely different."

Re: md5.sum contains outdated checksum for sha512.sum

[Joel Brobecker]

Thanks Tom for reporting this.

> > Using shell access, I found that sha512.sum is generated by root (so I
> > guess that's some site automation):
> > ...
> > $ ls -la *sum
> > -rw-rw-r--. 1 gdbadmin gdb  3386 jun  4  2017 md5.sum
> > -rw-r--r--. 1 root     gdb 11715 sep 20 22:44 sha512.sum
> > ...
> >
> > So, we should exclude sha512.sum from md5.sum. But sofar, I was not able
> > to find how this is generated.

Andreas said:

> I think md5.sum should just be deleted.  It appears to be obsolete.

I don't think it was me who generated the md5.sum file, and given
the modify date, I don't think it's something automatically done,
so I agree and removed the file.

Let's hope it doesn't re-appear.

-- 
Joel