[www.kde.org] [Bug 451486] md5sums of krita-5.0.2.dmg in https://download.kde.org/stable/krita/5.0.2/md5sum.txt is wrong

[Tian]

https://bugs.kde.org/show_bug.cgi?id=451486

--- Comment #8 from Tian <tiansworld at fedoraproject.org> ---
(In reply to Ben Cooksley from comment #6)
> If you take the URLs for download.kde.org you can add '.mirrorlist' to
> receive a nice page with various information - including MD5, SHA-1 and
> SHA-256 hashes of the files. 
> These hashes are always served directly by download.kde.org and you will not
> find those files on the mirrors.
Yes, one can find detailed and nice information by click the 'Details' link on
the right side of the page[1]. This page lists the link you mentioned.
At the bottom of the page, you will see a standalone md5sum.txt link. The hash
in this page is not the same as the one in 'Details' link.
All these information are from download.kde.org, not a mirror site.

I can use sha-256 to check the file.
But the purpose of this bug report is to find out what causes the difference
and how to fix it in the future, though I am not a contributor of KDE.

[1] https://download.kde.org/stable/krita/5.0.2/

-- 
You are receiving this mail because:
You are the assignee for the bug.