curl / Mailing Lists / curl-users / Single Mail
Buy commercial curl support from WolfSSL. We help you work out your issues, debug your libcurl applications, use the API, port to new platforms, add new features and more. With a team lead by the curl founder himself.

Re: curl-7.34.0.tar.bz2 checksum changed on 2021/02/07

From: Dan Fandrich via curl-users <>
Date: Tue, 23 Mar 2021 14:45:33 -0700

On Tue, Mar 23, 2021 at 02:56:54PM -0400, Henrique Matulis via curl-users wrote:
> Since February 7th 2021 our tests have been complaining that the checksum don't
> match, and it looks like they did change:
> $ sha1sum curl-7.34.0.tar.bz2
> 174dec3a7771622341404e5232b842ab5c142c73  curl-7.34.0.tar.bz2
> $ cat curl-7.34.0.sha1
> 548fe1686d01d689f79ed8cedc879309f8f5035b  curl-7.34.0.tar.bz2
> Has anyone else observed this issue? Anyone know if there was an expected
> change in curl then?

I've just downloaded and the
sha1sum is 548fe1686d01d689f79ed8cedc879309f8f5035b as expected. I've compared
this file with an archive I have locally from 8 years ago and that also
matches. Does the 174dec3a version decompress without error (i.e. bunzip2 -t
curl-7.34.0.tar.bz2 reports no problem) and does the size match (2770438 bytes
compressed)? If not, then it sounds like a download or caching issue. If so,
then I'd be interested to see what file differences there are between the
correct and incorrect versions.


Received on 2021-03-23