Re: [ANN] Lua 5.3.1 (final) now available

[Dirk Laurie <dirk.laurie@...>]

2015-07-19 20:47 GMT+02:00 Lorenzo Donati <lorenzodonatibz@tiscali.it>:
>
>
> On 19/07/2015 20:17, Ashwin Hirschi wrote:
>>
>>
>>>>     http://www.lua.org/ftp/lua-5.3.1.tar.gz
>>>
>>>
>>> I just downloaded that package and checked its signatures. I get a
>>> mismatch for both:
>>>
>>> MD5: 797adacada8d85761c079390ff1d9961
>>> SHA1: 1676c6a041d90b6982db8cef1e5fb26000ab6dee
>>
>>
>> According to http://www.lua.org/download.html there is no mismatch.
>
>
> Yep! Just checked. You're right!
>
> So the signatures in the message of lhf I replied to are wrong. But @Dirk
> seems to have downloaded a package that matches these older signatures so
> there is a problem somewhere. Was the release repackaged for some reason? I
> haven't seen any announce in the list about that. Maybe I missed a message
> (I'm not too active on the list lately).

Sorry! I calculated checksums, saw them in your message, and
only now on rereading do I notice that they are your new checksums,
not the old ones.

So the webpage (and LHF's email) give the wrong checksums.
Jonathan's post leads one to suspect a possible mechanism for
the error.