diff mbox series

[v2] boot/at91bootstrap3: bump to version 3.9.0

Message ID 1571765902-878-2-git-send-email-pjtexier@koncepto.io
State Accepted
Headers show
Series [v2] boot/at91bootstrap3: bump to version 3.9.0 | expand

Commit Message

Pierre-Jean Texier Oct. 22, 2019, 5:38 p.m. UTC
Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
---
 boot/at91bootstrap3/Config.in           | 4 ++--
 boot/at91bootstrap3/at91bootstrap3.hash | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

Comments

Ludovic Desroches Oct. 24, 2019, 11:23 a.m. UTC | #1
On Tue, Oct 22, 2019 at 07:38:22PM +0200, Pierre-Jean Texier wrote:
> 
> Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
> ---
>  boot/at91bootstrap3/Config.in           | 4 ++--
>  boot/at91bootstrap3/at91bootstrap3.hash | 2 +-
>  2 files changed, 3 insertions(+), 3 deletions(-)
> 
> diff --git a/boot/at91bootstrap3/Config.in b/boot/at91bootstrap3/Config.in
> index 89ef3fc..c3fc9d3 100644
> --- a/boot/at91bootstrap3/Config.in
> +++ b/boot/at91bootstrap3/Config.in
> @@ -19,7 +19,7 @@ choice
>  	prompt "AT91 Bootstrap 3 version"
>  
>  config BR2_TARGET_AT91BOOTSTRAP3_LATEST_VERSION
> -	bool "3.8.13"
> +	bool "3.9.0"
>  
>  config BR2_TARGET_AT91BOOTSTRAP3_CUSTOM_GIT
>  	bool "Custom Git repository"
> @@ -44,7 +44,7 @@ endif
>  
>  config BR2_TARGET_AT91BOOTSTRAP3_VERSION
>  	string
> -	default "v3.8.13" if BR2_TARGET_AT91BOOTSTRAP3_LATEST_VERSION
> +	default "v3.9.0" if BR2_TARGET_AT91BOOTSTRAP3_LATEST_VERSION
>  	default BR2_TARGET_AT91BOOTSTRAP3_CUSTOM_REPO_VERSION \
>  		if BR2_TARGET_AT91BOOTSTRAP3_CUSTOM_GIT
>  
> diff --git a/boot/at91bootstrap3/at91bootstrap3.hash b/boot/at91bootstrap3/at91bootstrap3.hash
> index ecfda3b..93f495f 100644
> --- a/boot/at91bootstrap3/at91bootstrap3.hash
> +++ b/boot/at91bootstrap3/at91bootstrap3.hash
> @@ -1,2 +1,2 @@
>  # Locally calculated
> -sha256	a5a10579598d47475696fab56c086225b0f4b710299e2dc9e0f9b6f72ed98be8  at91bootstrap3-v3.8.13.tar.gz
> +sha256	9960b0d18fe42feee566d4c52efa0d7c8251685bf9acfdf343f30a27951ada1e  at91bootstrap3-v3.9.0.tar.gz

I don't have the same:
e23e6df23b79ca81e412cb73a1f48bd95df8d46c7d52a1d073c2ed9d4f3a1a71
/home/ldesroches/Downloads/at91bootstrap-3.9.0.tar.gz

I downloaded it 2 times, can you check again?

Regards

Ludovic


> -- 
> 2.7.4
> 
>
Thomas Petazzoni Dec. 16, 2019, 9:45 a.m. UTC | #2
Hello Pierre-Jean,

On Thu, 24 Oct 2019 11:23:34 +0000
<Ludovic.Desroches@microchip.com> wrote:

> > diff --git a/boot/at91bootstrap3/at91bootstrap3.hash b/boot/at91bootstrap3/at91bootstrap3.hash
> > index ecfda3b..93f495f 100644
> > --- a/boot/at91bootstrap3/at91bootstrap3.hash
> > +++ b/boot/at91bootstrap3/at91bootstrap3.hash
> > @@ -1,2 +1,2 @@
> >  # Locally calculated
> > -sha256	a5a10579598d47475696fab56c086225b0f4b710299e2dc9e0f9b6f72ed98be8  at91bootstrap3-v3.8.13.tar.gz
> > +sha256	9960b0d18fe42feee566d4c52efa0d7c8251685bf9acfdf343f30a27951ada1e  at91bootstrap3-v3.9.0.tar.gz  
> 
> I don't have the same:
> e23e6df23b79ca81e412cb73a1f48bd95df8d46c7d52a1d073c2ed9d4f3a1a71
> /home/ldesroches/Downloads/at91bootstrap-3.9.0.tar.gz
> 
> I downloaded it 2 times, can you check again?

Indeed, I also don't see the correct hash:

ERROR: at91bootstrap3-v3.9.0.tar.gz has wrong sha256 hash:
ERROR: expected: 9960b0d18fe42feee566d4c52efa0d7c8251685bf9acfdf343f30a27951ada1e
ERROR: got     : e23e6df23b79ca81e412cb73a1f48bd95df8d46c7d52a1d073c2ed9d4f3a1a71
ERROR: Incomplete download, or man-in-the-middle (MITM) attack

I'm seeing the same hash as Ludovic here.

Pierre-Jean, could you double check ? Do you still have in your
download folder the tarball with the
9960b0d18fe42feee566d4c52efa0d7c8251685bf9acfdf343f30a27951ada1e hash ?
If so, please don't delete it, and instead use it to compare it with
the current tarball that you can get by downloading from Github.

Best regards,

Thomas
Pierre-Jean Texier Dec. 16, 2019, 5:33 p.m. UTC | #3
Hello Thomas,

Le 16/12/2019 à 10:45, Thomas Petazzoni a écrit :
> Indeed, I also don't see the correct hash:
> 
> ERROR: at91bootstrap3-v3.9.0.tar.gz has wrong sha256 hash:
> ERROR: expected: 9960b0d18fe42feee566d4c52efa0d7c8251685bf9acfdf343f30a27951ada1e
> ERROR: got     : e23e6df23b79ca81e412cb73a1f48bd95df8d46c7d52a1d073c2ed9d4f3a1a71
> ERROR: Incomplete download, or man-in-the-middle (MITM) attack
> 
> I'm seeing the same hash as Ludovic here.
> 
> Pierre-Jean, could you double check ? Do you still have in your
> download folder the tarball with the
> 9960b0d18fe42feee566d4c52efa0d7c8251685bf9acfdf343f30a27951ada1e hash ?
> If so, please don't delete it, and instead use it to compare it with
> the current tarball that you can get by downloading from Github.

Interesting, yes, I still have the tarball (from 22/10/2019), see after:

$: ls -l dl/at91bootstrap3
total 452
-rw-r--r--  1 pjtexier pjtexier 450749 oct.  22 18:35 
at91bootstrap3-v3.9.0.tar.gz
drwxr-xr-x 12 pjtexier pjtexier   4096 oct.  22 18:31 git
-rw-r--r--  1 pjtexier pjtexier    512 oct.  22 18:35 git.readme

and the hash is:

$: sha256sum dl/at91bootstrap3/at91bootstrap3-v3.9.0.tar.gz
9960b0d18fe42feee566d4c52efa0d7c8251685bf9acfdf343f30a27951ada1e 
dl/at91bootstrap3/at91bootstrap3-v3.9.0.tar.gz

I will check the difference ;)

Thanks

Regards

Pierre-Jean

> 
> Best regards,
> 
> Thomas
Thomas Petazzoni Dec. 23, 2019, 10:41 p.m. UTC | #4
Hello Pierre-Jean,

On Mon, 16 Dec 2019 18:33:23 +0100
Pierre-Jean Texier <pjtexier@koncepto.io> wrote:

> > Pierre-Jean, could you double check ? Do you still have in your
> > download folder the tarball with the
> > 9960b0d18fe42feee566d4c52efa0d7c8251685bf9acfdf343f30a27951ada1e hash ?
> > If so, please don't delete it, and instead use it to compare it with
> > the current tarball that you can get by downloading from Github.  
> 
> Interesting, yes, I still have the tarball (from 22/10/2019), see after:
> 
> $: ls -l dl/at91bootstrap3
> total 452
> -rw-r--r--  1 pjtexier pjtexier 450749 oct.  22 18:35 
> at91bootstrap3-v3.9.0.tar.gz
> drwxr-xr-x 12 pjtexier pjtexier   4096 oct.  22 18:31 git
> -rw-r--r--  1 pjtexier pjtexier    512 oct.  22 18:35 git.readme
> 
> and the hash is:
> 
> $: sha256sum dl/at91bootstrap3/at91bootstrap3-v3.9.0.tar.gz
> 9960b0d18fe42feee566d4c52efa0d7c8251685bf9acfdf343f30a27951ada1e 
> dl/at91bootstrap3/at91bootstrap3-v3.9.0.tar.gz
> 
> I will check the difference ;)

Any news on this ?

Thanks!

Thomas
Pierre-Jean Texier Dec. 24, 2019, 3:37 p.m. UTC | #5
Hello Thomas,

Le 23/12/2019 à 23:41, Thomas Petazzoni a écrit :
> Any news on this ?

Sorry for the delay, I started to investigate but I still have one more 
thing to check, I'll finish this Thursday ;)

Thanks,

Pierre-Jean

> 
> Thanks!
> 
> Thomas
diff mbox series

Patch

diff --git a/boot/at91bootstrap3/Config.in b/boot/at91bootstrap3/Config.in
index 89ef3fc..c3fc9d3 100644
--- a/boot/at91bootstrap3/Config.in
+++ b/boot/at91bootstrap3/Config.in
@@ -19,7 +19,7 @@  choice
 	prompt "AT91 Bootstrap 3 version"
 
 config BR2_TARGET_AT91BOOTSTRAP3_LATEST_VERSION
-	bool "3.8.13"
+	bool "3.9.0"
 
 config BR2_TARGET_AT91BOOTSTRAP3_CUSTOM_GIT
 	bool "Custom Git repository"
@@ -44,7 +44,7 @@  endif
 
 config BR2_TARGET_AT91BOOTSTRAP3_VERSION
 	string
-	default "v3.8.13" if BR2_TARGET_AT91BOOTSTRAP3_LATEST_VERSION
+	default "v3.9.0" if BR2_TARGET_AT91BOOTSTRAP3_LATEST_VERSION
 	default BR2_TARGET_AT91BOOTSTRAP3_CUSTOM_REPO_VERSION \
 		if BR2_TARGET_AT91BOOTSTRAP3_CUSTOM_GIT
 
diff --git a/boot/at91bootstrap3/at91bootstrap3.hash b/boot/at91bootstrap3/at91bootstrap3.hash
index ecfda3b..93f495f 100644
--- a/boot/at91bootstrap3/at91bootstrap3.hash
+++ b/boot/at91bootstrap3/at91bootstrap3.hash
@@ -1,2 +1,2 @@ 
 # Locally calculated
-sha256	a5a10579598d47475696fab56c086225b0f4b710299e2dc9e0f9b6f72ed98be8  at91bootstrap3-v3.8.13.tar.gz
+sha256	9960b0d18fe42feee566d4c52efa0d7c8251685bf9acfdf343f30a27951ada1e  at91bootstrap3-v3.9.0.tar.gz