1993-11-07 - Re: Warning for PGP Users!

Header Data

From: Alan Barrett <barrett@daisy.ee.und.ac.za>
To: Carl Ellison <cme@sw.stratus.com>
Message Hash: ca40ff40ac112abedf823ed72ed48f00d38579a3ee2db02ed4cdaee3958d95c4
Message ID: <Pine.3.03.9311071239.m459-a100000@daisy.ee.und.ac.za>
Reply To: <199311061605.LAA05613@ellisun.sw.stratus.com>
UTC Datetime: 1993-11-07 10:33:27 UTC
Raw Date: Sun, 7 Nov 93 02:33:27 PST

Raw message

From: Alan Barrett <barrett@daisy.ee.und.ac.za>
Date: Sun, 7 Nov 93 02:33:27 PST
To: Carl Ellison <cme@sw.stratus.com>
Subject: Re: Warning for PGP Users!
In-Reply-To: <199311061605.LAA05613@ellisun.sw.stratus.com>
Message-ID: <Pine.3.03.9311071239.m459-a100000@daisy.ee.und.ac.za>
MIME-Version: 1.0
Content-Type: text/plain


> I checked the .tar file at soda.berkeley.edu and the sources have
> several mismatching MD5s.  Is anyone looking at this?

Yes, the PGP 2.3A distribution has incorrect MD5 values in
contrib/md5sum/pgp23.md5. I think that they were not updated to acount for
the changes between versions 2.3 and 2.3A. 

Nevertheless, the file pgp23sigA.asc (which is distributed separately from
the .tar.Z and .zip files) contains good detached signatures from Colin
Plumb, covering the various .zip and .tar.Z files for PGP 2.3A.  

--apb (Alan Barrett)








Thread