[openssl-dev] OpenSSL version 1.0.2e released (corrected download)

[Corinna Vinschen]

Hi,

the corrected archive is still broken:

On Dec  3 18:53, Matt Caswell wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
> 
>    Due to an error in the release process the original distribution
> downloads were failing to build. New downloads have now been made
> available on the website. Corrected checksums are given below.
> 
>    OpenSSL version 1.0.2e released
>    ===============================
> 
>    OpenSSL - The Open Source toolkit for SSL/TLS
>    http://www.openssl.org/
> 
>    The OpenSSL project team is pleased to announce the release of
>    version 1.0.2e of our open source toolkit for SSL/TLS. For details
>    of changes and known issues see the release notes at:
> 
>         http://www.openssl.org/news/openssl-1.0.2-notes.html
> 
>    OpenSSL 1.0.2e is available for download via HTTP and FTP from the
>    following master locations (you can find the various FTP mirrors
> under
>    http://www.openssl.org/source/mirror.html):
> 
>      * http://www.openssl.org/source/
>      * ftp://ftp.openssl.org/source/
> 
>    The distribution file name is:
> 
>     o openssl-1.0.2e.tar.gz
>       Size: 5256555
>       MD5 checksum: 5262bfa25b60ed9de9f28d5d52d77fc5
>       SHA1 checksum: 2c5691496761cb18f98476eefa4d35c835448fb6
>       SHA256 checksum:
> e23ccafdb75cfcde782da0151731aa2185195ac745eea3846133f2e05c0e0bff

This archive has invalid symlinks:

$ sha256sum openssl-1.0.2e.tar.gz 
e23ccafdb75cfcde782da0151731aa2185195ac745eea3846133f2e05c0e0bff  openssl-1.0.2e.tar.gz
$ tar tvzf openssl-1.0.2e.tar.gz  | grep '^l' | head -3
lrwxrwxrwx openssl/openssl     0 2015-12-03 15:44 openssl-1.0.2e/apps/md4.c -> openssl-1.0.2e/../crypto/md4/md4.c
lrwxrwxrwx openssl/openssl      0 2015-12-03 15:44 openssl-1.0.2e/test/bftest.c -> openssl-1.0.2e/../crypto/bf/bftest.c
lrwxrwxrwx openssl/openssl      0 2015-12-03 15:44 openssl-1.0.2e/test/bntest.c -> openssl-1.0.2e/../crypto/bn/bntest.c

Compare with openssl-1.0.2d:

$ tar tvzf openssl-1.0.2d.tar.gz openssl-1.0.2d | grep '^l' | head -3
lrwxrwxrwx openssl/openssl     0 2015-07-09 14:03 openssl-1.0.2d/apps/md4.c -> ../crypto/md4/md4.c
lrwxrwxrwx openssl/openssl      0 2015-07-09 14:03 openssl-1.0.2d/include/openssl/aes.h -> ../../crypto/aes/aes.h
lrwxrwxrwx openssl/openssl      0 2015-07-09 14:03 openssl-1.0.2d/include/openssl/asn1.h -> ../../crypto/asn1/asn1.h


Corinna

-- 
Corinna Vinschen
Cygwin Maintainer
Red Hat
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20151203/509b7882/attachment.sig>