Bug 103668

Summary: Package and published checksum don't match
Product: [Retired] Red Hat Network Reporter: Koen Bekx <heaven7>
Component: RHN/Web SiteAssignee: Chip Turner <cturner>
Status: CLOSED NOTABUG QA Contact: Red Hat Satellite QA List <satqe-list>
Severity: medium Docs Contact:
Priority: medium    
Version: RHN StableCC: rhn-bugs
Target Milestone: ---   
Target Release: ---   
Hardware: i386   
OS: Linux   
URL: https://rhn.redhat.com/help/latest-up2date.pxt
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2003-09-03 21:58:27 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Koen Bekx 2003-09-03 18:41:46 UTC 
Description of problem:

After having downloaded the update package
up2date-gnome-3.1.23.2-1.i386.rpm
from
https://rhn.redhat.com/help/latest-up2date.pxt ,
I checked the checksum of the downloaded package using md5sum,
which reported a checksum of
1326cd9b41265b8bae26b8b2f227a804
while the RHN page mentiones a checksum of
733d0aca17c15af0b1fa709ba86337dc
.
In theory, I cannot trust the downloaded package to be authentic and safe.


Version-Release number of selected component (if applicable):
  3.1.23.2-1.i386

How reproducible:

Steps to Reproduce:
1. Open https://rhn.redhat.com/help/latest-up2date.pxt with your Web browser.
2. Locate the section "Red Hat Linux 9 i386"
3. Download the package up2date-gnome-3.1.23.2-1.i386.rpm
4. Open a terminal window
5. cd to the directory used as target for downloading
6. execute the command
   md5sum 'up2date-gnome-3.1.23.2-1.i386.rpm'
    
Actual results:
  The checksum reported by md5sum is :
  1326cd9b41265b8bae26b8b2f227a804

Expected results:
  The same checksum as mentioned in the RHN page :  
  733d0aca17c15af0b1fa709ba86337dc

Additional info:
  (none)
Comment 1 Josef Komenda 2003-09-03 21:58:27 UTC 
Have downloaded and verified the md5sum:
md5sum up2date-gnome-3.1.23.2-1.i386.rpm
733d0aca17c15af0b1fa709ba86337dc  up2date-gnome-3.1.23.2-1.i386.rpm

It matches the website:
    * up2date-gnome-3.1.23.2-1.i386.rpm - MD5 Checksum:
733d0aca17c15af0b1fa709ba86337dc

Please try downloading this again. Try using: 
wget
https://download-3.rhn.redhat.com/download/1062712528/748a3a1d901785554656e4e4b93fc45307d3717c/0/0/rhn/repository/NULL/up2date-gnome/3.1.23.2-1/i386/up2date-gnome-3.1.23.2-1.i386.rpm