>Number:         9414
>Category:       pkg
>Synopsis:       md5 of swig tarball from canonical site != md5 in pkgsrc
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    pkg-manager (NetBSD software packages system bug manager)
>State:          open
>Class:          support
>Submitter-Id:   net
>Arrival-Date:   Sun Feb 13 15:42:00 2000
>Last-Modified:
>Originator:     Charlie Root
>Organization:
MIT
	
>Release:        2000.02.12<NetBSD-current source date>
>Environment:
	
System: NetBSD al-khwarizmi 1.4.1 NetBSD 1.4.1 (GENERIC) #1: Tue Aug 10 00:03:09 MEST 1999 fvdl@struis:/usr/src/sys/arch/i386/compile/GENERIC i386


>Description:
Using pkgsrc downloaded 2000.02.12, 'make' in /usr/pkgsrc/ produces:

>How-To-Repeat:
	
>Fix:
	
>Audit-Trail:
>Unformatted:
>> Checksum mismatch for swig1.1p5.tar.gz.
Make sure the Makefile and md5 file (/usr/pkgsrc/devel/swig/files/md5)
are up to date.  If you want to override this check, type
"make NO_CHECKSUM=yes [other args]".
*** Error code 1

Stop.

I downloaded swig1.1p5.tar.gz by hand from ftp.swig.org and indeed
it does generate a different md5:

al-khwarizmi:/usr/pkgsrc/devel/swig/files% cat md5 
$NetBSD: md5,v 1.1 1999/01/14 05:00:25 mellon Exp $

MD5 (swig1.1p5.tar.gz) = 0626b69b2aa6814ca0c61d23a7f9df23

al-khwarizmi:/usr/pkgsrc/devel/swig/files% md5 swig1.1p5.tar.gz 
MD5 (swig1.1p5.tar.gz) = 097bd08998590c400472995cbf282622

Either an incorrect md5 got into the NetBSD pkgsrc tree, or the
swig site has been cracked (hence the cc to swig@swig.org).  I'd
appreciate it if someone would figure out which....
	Using pkgsrc downloaded 2000.02.12, 'make' in /usr/pkgsrc/ produces:

>> Checksum mismatch for swig1.1p5.tar.gz.
Make sure the Makefile and md5 file (/usr/pkgsrc/devel/swig/files/md5)
are up to date.  If you want to override this check, type
"make NO_CHECKSUM=yes [other args]".
*** Error code 1

Stop.

I downloaded swig1.1p5.tar.gz by hand from ftp.swig.org and indeed
it does generate a different md5:

al-khwarizmi:/usr/pkgsrc/devel/swig/files% cat md5 
$NetBSD: md5,v 1.1 1999/01/14 05:00:25 mellon Exp $

MD5 (swig1.1p5.tar.gz) = 0626b69b2aa6814ca0c61d23a7f9df23

al-khwarizmi:/usr/pkgsrc/devel/swig/files% md5 swig1.1p5.tar.gz 
MD5 (swig1.1p5.tar.gz) = 097bd08998590c400472995cbf282622

The only explatnations I can come up with are that either an
incorrect md5 got into the NetBSD pkgsrc tree, or the swig site
has been cracked (hence the cc to swig@swig.org).  I'd appreciate
it if someone would figure out which....