nginx-1.27.0 - shasum does not match with expected shasum from pkg-oss

D
  • 29 May '24
Hello,

the SHA512 of https://nginx.org/download/nginx-1.27.0.tar.gz (downloaded
2024-05-29 15:42:02 UTC) is
251bfe65c717a8027ef05caae2ab2ea73b9b544577f539a1d419fe6adf0bcc846b73b58f54ea3f102df79aaf340e4fa56793ddadea3cd61bcbbe2364ef94bacb

This does not match with the shasum expected here
https://hg.nginx.org/pkg-oss/file/tip/contrib/src/nginx/SHA512SUMS#l57
I
  • 29 May '24
On 29/05/2024 16:52, Daniel Jagszent wrote:
> Hello,
>
> the SHA512 of https://nginx.org/download/nginx-1.27.0.tar.gz (downloaded
> 2024-05-29 15:42:02 UTC) is
> 251bfe65c717a8027ef05caae2ab2ea73b9b544577f539a1d419fe6adf0bcc846b73b58f54ea3f102df79aaf340e4fa56793ddadea3cd61bcbbe2364ef94bacb
>
> This does not match with the shasum expected here
> https://hg.nginx.org/pkg-oss/file/tip/contrib/src/nginx/SHA512SUMS#l57
> _______________________________________________
> nginx mailing list
> nginx at nginx.org
> https://mailman.nginx.org/mailman/listinfo/nginx

Daniel,

Thank you for spotting this.

Indeed, due to last minute change into CHANGES wording the checksum of 
published archives differs from what pkg-oss expects.
There are no changes into code though.
We are working on publishing new packages and updated pkg-oss repository 
with corrected checksums.

I will update you later when packages and pkg-oss are published.

Kind regards,
Igor
I
  • 29 May '24
On 29/05/2024 17:22, Igor Ippolitov wrote:
> On 29/05/2024 16:52, Daniel Jagszent wrote:
>> Hello,
>>
>> the SHA512 of https://nginx.org/download/nginx-1.27.0.tar.gz (downloaded
>> 2024-05-29 15:42:02 UTC) is
>> 251bfe65c717a8027ef05caae2ab2ea73b9b544577f539a1d419fe6adf0bcc846b73b58f54ea3f102df79aaf340e4fa56793ddadea3cd61bcbbe2364ef94bacb 
>>
>>
>> This does not match with the shasum expected here
>> https://hg.nginx.org/pkg-oss/file/tip/contrib/src/nginx/SHA512SUMS#l57
>> _______________________________________________
> Daniel,
>
> Thank you for spotting this.
>
> Indeed, due to last minute change into CHANGES wording the checksum of 
> published archives differs from what pkg-oss expects.
> There are no changes into code though.
> We are working on publishing new packages and updated pkg-oss 
> repository with corrected checksums.
>
> I will update you later when packages and pkg-oss are published.
>
> Kind regards,
> Igor
> _______________________________________________
>
Daniel,

pkg-oss and packages themselves were published and should match sources 
precisely.

Kind regards,
Igor.