From user-return-23354-archive-asf-public=cust-asf.ponee.io@flink.apache.org Mon Oct 1 14:46:10 2018 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by mx-eu-01.ponee.io (Postfix) with SMTP id 306E2180660 for ; Mon, 1 Oct 2018 14:46:10 +0200 (CEST) Received: (qmail 96122 invoked by uid 500); 1 Oct 2018 12:46:08 -0000 Mailing-List: contact user-help@flink.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Delivered-To: mailing list user@flink.apache.org Received: (qmail 96110 invoked by uid 99); 1 Oct 2018 12:46:08 -0000 Received: from mail-relay.apache.org (HELO mailrelay1-lw-us.apache.org) (207.244.88.152) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 01 Oct 2018 12:46:08 +0000 Received: from mail-qt1-f175.google.com (mail-qt1-f175.google.com [209.85.160.175]) by mailrelay1-lw-us.apache.org (ASF Mail Server at mailrelay1-lw-us.apache.org) with ESMTPSA id 258EAED5 for ; Mon, 1 Oct 2018 12:46:08 +0000 (UTC) Received: by mail-qt1-f175.google.com with SMTP id u34-v6so3124681qth.3 for ; Mon, 01 Oct 2018 05:46:08 -0700 (PDT) X-Gm-Message-State: ABuFfohaWSeAhE76Rc+UaZSc4TTE/1DhwG3FLw1Ib7EcUdmXFBzo8/Dn qaNjIfUZCnLdiDwHhA2s7G0GBZ4EwmAT1kMxfdQ= X-Google-Smtp-Source: ACcGV60TQwZ/UKDgcnw1J/T4z+q/qHApj9eo8EMEx2hPH1i1FvG3ENcQI0HQ+Ih/duDhs2sBxTnrj63kmgV1o0cvbUQ= X-Received: by 2002:ac8:6c8:: with SMTP id j8-v6mr8290070qth.314.1538397967754; Mon, 01 Oct 2018 05:46:07 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Till Rohrmann Date: Mon, 1 Oct 2018 14:45:31 +0200 X-Gmail-Original-Message-ID: Message-ID: Subject: Re: flink-1.6.1-bin-scala_2.11.tgz fails signture and hash verification To: gianluca@mediadistillery.com Cc: Fabian Hueske , vino yang , user Content-Type: multipart/alternative; boundary="000000000000642dba05772a3080" --000000000000642dba05772a3080 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable This is unfortunately the realm of the ASF over which we don't have direct control. We could think about filing an INFRA JIRA ticket to report this problem (if it can be backtracked). On Mon, Oct 1, 2018 at 2:42 PM Gianluca Ortelli < gianluca@mediadistillery.com> wrote: > Hi Till, > > I also believe that it's a problem with a single mirror. It was not a > blocking problem for me; I just wanted you to be aware of it, in case you > have some policy regarding the management of mirrors. > > Best, > Gianluca > > > On Mon, 1 Oct 2018 at 14:27, Till Rohrmann wrote: > >> Hi Gianluca, >> >> I've downloaded flink-1.6.1-bin-scala_2.11.tgz from here [1] and verifie= d >> that the shasum512 and the signature are both correct. >> >> The only way I could explain this is that either your downloaded >> artifacts or the mirror you got the binaries from got corrupted. >> >> [1] https://dist.apache.org/repos/dist/release/flink/flink-1.6.1/ >> >> Cheers, >> Till >> >> On Mon, Oct 1, 2018 at 12:07 PM Gianluca Ortelli < >> gianluca@mediadistillery.com> wrote: >> >>> Hi Fabian, >>> >>> the mirror is >>> https://www.apache.org/dyn/closer.lua/flink/flink-1.6.1/flink-1.6.1-bin= -scala_2.11.tgz >>> >>> I just tried a download and the hash is still wrong: it should be >>> >>> >>> d0153bad859e3c2da7e73299837f95670279b3102a0982809f56eb61875908a10120e82= bc2dca59972e912c0221cbbfd01f4cd1128a92dd37358e28fe1f76f2f >>> >>> but instead it's >>> >>> >>> 9b4ceb7ad59df27ea4c12d15845165dcf64675a26161d502d399234ae237f40f719ab6d= a4fac7ba210a20aa82364b5ac0377b06a1324e21516198b7a23b5d19c >>> >>> Best regards, >>> Gianluca >>> >>> >>> On Mon, 1 Oct 2018 at 11:59, Fabian Hueske wrote: >>> >>>> Hi Gianluca, >>>> >>>> I tried to validate the issue but hash and signature are OK for me. >>>> >>>> Do you remember which mirror you used to download the binaries? >>>> >>>> Best, Fabian >>>> >>>> >>>> Am Sa., 29. Sep. 2018 um 17:24 Uhr schrieb vino yang < >>>> yanghua1127@gmail.com>: >>>> >>>>> Hi Gianluca, >>>>> >>>>> This is very strange, Till may be able to give an explanation, becaus= e >>>>> it is the release manager of this version. >>>>> >>>>> Thanks, vino. >>>>> >>>>> Gianluca Ortelli =E4=BA=8E2018=E5=B9= =B49=E6=9C=8828=E6=97=A5=E5=91=A8=E4=BA=94 >>>>> =E4=B8=8B=E5=8D=884:02=E5=86=99=E9=81=93=EF=BC=9A >>>>> >>>>>> Hi, >>>>>> >>>>>> I just downloaded flink-1.6.1-bin-scala_2.11.tgz from >>>>>> https://flink.apache.org/downloads.html and noticed that it fails >>>>>> signature verification with a >>>>>> >>>>>> gpg: BAD signature from "Till Rohrmann (stsffap) < >>>>>> trohrmann@apache.org>" >>>>>> >>>>>> message. The sha512 hash doesn't match either. >>>>>> >>>>>> I switched to 1.6.0, which verifies OK. >>>>>> >>>>>> Best regards, >>>>>> Gianluca >>>>>> >>>>> --000000000000642dba05772a3080 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
This is unfortunately the realm of the ASF over which we d= on't have direct control. We could think about filing an INFRA JIRA tic= ket to report this problem (if it can be backtracked).

On Mon, Oct 1, 2018 at 2:42 PM Gianluca O= rtelli <gianluca@mediadi= stillery.com> wrote:
Hi Till,

I also believe that it'= ;s a problem with a single mirror. It was not a blocking problem for me; I = just wanted you to be aware of it, in case you have some policy regarding t= he management of mirrors.

Best,
Gianlu= ca


On Mon, 1 Oct 2018 at 14:27, Till Rohrmann <trohrmann@apache.org= > wrote:
Hi Gianluca,

I've downloaded flink-1.= 6.1-bin-scala_2.11.tgz from here [1] and verified that the shasum512 and th= e signature are both correct.=C2=A0

The only way I= could explain this is that either your downloaded artifacts or the mirror = you got the binaries from got corrupted.


Cheers,
Till
On Mon, Oct 1, 2018 at 12:07 = PM Gianluca Ortelli <gianluca@mediadistillery.com> wrote:
=
Hi Fabian,


=
I just tried a download and the hash is still wrong: it should be
=

d0153bad859e3c2da7e73299837f95670279b3102a0982809= f56eb61875908a10120e82bc2dca59972e912c0221cbbfd01f4cd1128a92dd37358e28fe1f7= 6f2f

but instead it's

9b4ceb7ad59df27ea4c12d15845165dcf64675a26161d502d399234ae237f40f719ab6da4f= ac7ba210a20aa82364b5ac0377b06a1324e21516198b7a23b5d19c

=
Best regards,
Gianluca


On Mon, 1 Oct 2018 = at 11:59, Fabian Hueske <fhueske@gmail.com> wrote:
Hi Gianluca,

<= /div>
I tried to validate the issue but hash and signature are OK for m= e.

Do you remember which mirror you used to do= wnload the binaries?

Best, Fabian

Am Sa., 29. S= ep. 2018 um 17:24=C2=A0Uhr schrieb vino yang <yanghua1127@gmail.com>:
Hi Gianluca,

This is very strange, Till may be = able to give an explanation, because it is the release manager of this vers= ion.

Thanks, vino.

Gianluca Ortelli <gianluca@mediadistillery.= com> =E4=BA=8E2018=E5=B9=B49=E6=9C=8828=E6=97=A5=E5=91=A8=E4=BA=94 = =E4=B8=8B=E5=8D=884:02=E5=86=99=E9=81=93=EF=BC=9A


message. The sha512 h= ash doesn't match either.

I switched to 1.= 6.0, which verifies OK.

Best regards,
G= ianluca
--000000000000642dba05772a3080--