This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enigA34B8380C44753C7D2B64864
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Hello all,

I am using pkgsrc-current,and I tried to make / install the package
ap-bandwidth. But right after downloading the file mod_bandwidth.c I
encounter the following error:

<snip>

checksum: Checksum SHA1 mismatch for ap13-bandwidth-2.0.6/mod_bandwidth.c=

ERROR: Make sure the Makefile and checksum file
(/usr/pkgsrc/www/ap-bandwidth/distinfo)
ERROR: are up to date.  If you want to override this check, type
ERROR: "/usr/bin/make NO_CHECKSUM=3Dyes [other args]".
*** Error code 1

Stop.
make: stopped in /usr/pkgsrc/www/ap-bandwidth
*** Error code 1

Stop.
make: stopped in /usr/pkgsrc/www/ap-bandwidth

</snip>



I have checked the distinfo-file, which has the following content (I
have done a cvs-update twice today already, so it -is- a up-to-date
pkgsrc-current.):

<snip>

# cat /usr/pkgsrc/www/ap-bandwidth/distinfo
$NetBSD$

SHA1 (ap13-bandwidth-2.0.6/mod_bandwidth.c) =3D
96d4fb5a68bc56a310979fe68c322445f9f4fe56
RMD160 (ap13-bandwidth-2.0.6/mod_bandwidth.c) =3D
e093a8a5de89a91d523bb0702e21c43046d5e48c
Size (ap13-bandwidth-2.0.6/mod_bandwidth.c) =3D 43653 bytes
#

</snip>


When checking the downloaded file manually with sha1 and rmd160, I get
different sums, as the error already suggests. I downloaded the file
manually as well, checked that again, and the date of last change on the
ftp-server. It was somewhen around june or july 2006, half a year ago.
The sums I got from this file matched of course those of the file
downloaded by pkgsrc. The file was complete, has had the correct size as
stated in the distinfo-file, but different checksums.

Whats wrong here? Should the checksums in the distinfo-file probably be
updated? Since the date of the file on the ftp-server is quite old, and
the file size seems correct, I assume that the checksum in the distinfo
file are incorrect.

The checksum I got from the downloaded files are:


<snip>

# rmd160 mod_bandwidth.c
RMD160 (mod_bandwidth.c) =3D a151481cb2d7d222e46de456433d95e5d5ab7f6c
#

# sha1 mod_bandwidth.c
SHA1 (mod_bandwidth.c) =3D 16cbe7c39fbe0bdd610547ca256c3718fbf9818e
#

</snip>

--=20

MfG / best regards
	Volkmar Seifert
-------------------------------------------------------------------------=

 "Programming today is a race between software developers, striving to
  build bigger and better idiot proof software, and the Universe, trying
  to produce bigger and better idiots.
  So far, the Universe is winning."

  URL: www.DimensionV.de                         eMail: vs@DimensionV.de
  GPG-Key ID:         0xE97E64B2
  GPG-Fingerprint:    45AE 9258 C0B2 2F8D D529  3978 5283 3FD1 E97E 64B2
-------------------------------------------------------------------------=



--------------enigA34B8380C44753C7D2B64864
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFF2JFRUoM/0el+ZLIRAskyAJ9QL7S+dDCk6UIFRWGTkjhhneb+YwCdEF7w
VGuv/ZDKmOCphvYsDDf0Wbc=
=Bke8
-----END PGP SIGNATURE-----

--------------enigA34B8380C44753C7D2B64864--