Discussion:
Wrong sha256 in cacert.pem.sha256 for cacert.pem?
Michele Locati
2018-10-17 09:55:15 UTC
Permalink
Hi all,

I downloaded the file https://curl.haxx.se/ca/cacert.pem.sha256 and it
contains this hash:
238823cd92d3bcdd67c1c278536d6c282dd6b526ee6ee97efbf00ef31d8c5d79

BTW, the hash of https://curl.haxx.se/ca/cacert.pem should be
86695B1BE9225C3CF882D283F05C944E3AABBC1DF6428A4424269A93E997DC65

--
Michele
-----------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-users
Etiquette: https://curl.haxx.s
Daniel Stenberg
2018-10-17 11:07:14 UTC
Permalink
Post by Michele Locati
I downloaded the file https://curl.haxx.se/ca/cacert.pem.sha256 and it
238823cd92d3bcdd67c1c278536d6c282dd6b526ee6ee97efbf00ef31d8c5d79
BTW, the hash of https://curl.haxx.se/ca/cacert.pem should be
86695B1BE9225C3CF882D283F05C944E3AABBC1DF6428A4424269A93E997DC65
Hm, yes. Thanks for reporting this. This mismatch happens because the CA
bundle was updated ~8 hours ago and those files are cached by the CDN
frontends for 12 hours by default... I'll see what I should do about it!
--
/ daniel.haxx.se
-----------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-users
Etiquette: https://curl.haxx.se/mai
Michele Locati
2018-10-17 11:38:35 UTC
Permalink
Thanks for the fast feedback! Everything seems ok now:

$ curl -s https://curl.haxx.se/ca/cacert.pem.sha256
86695b1be9225c3cf882d283f05c944e3aabbc1df6428a4424269a93e997dc65 cacert.pem

$ curl -s https://curl.haxx.se/ca/cacert.pem | sha256sum
86695b1be9225c3cf882d283f05c944e3aabbc1df6428a4424269a93e997dc65 -

--
Michele

Il giorno mer 17 ott 2018 alle ore 13:13 Daniel Stenberg
Post by Daniel Stenberg
Post by Michele Locati
I downloaded the file https://curl.haxx.se/ca/cacert.pem.sha256 and it
238823cd92d3bcdd67c1c278536d6c282dd6b526ee6ee97efbf00ef31d8c5d79
BTW, the hash of https://curl.haxx.se/ca/cacert.pem should be
86695B1BE9225C3CF882D283F05C944E3AABBC1DF6428A4424269A93E997DC65
Hm, yes. Thanks for reporting this. This mismatch happens because the CA
bundle was updated ~8 hours ago and those files are cached by the CDN
frontends for 12 hours by default... I'll see what I should do about it!
--
/ daniel.haxx.se
-----------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-users
Etiquette: https://curl.haxx.se/mail/etiquette.html
-----------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-users
Etiquette: https://curl.haxx.se/mail/etiquette.h

Loading...