[THRIFT-5218] Automated Github release artifacts do not match checksums provided

• Type: Question
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.14.0
• Component/s: Build Process
• Assignee: Jens Geyer
• Reporter: Hu Keping
• Created: 26/May/20 13:59
• Updated: 11/Feb/21 22:27
• Resolved: 27/May/20 06:57

Description

The released tarball from apache.com and github.com/apache are different, which one should I trust and use?

 

https://github.com/apache/thrift/archive/v0.13.0.tar.gz

http://www.apache.org/dyn/closer.cgi?path=/thrift/0.13.0/thrift-0.13.0.tar.gz

 

MD5SUM of these two tarball:

38a27d391a2b03214b444cb13d5664f1 thrift-0.13.0.tar.gz
d03a4582a947bf932f30a2c9ea2a9c00 v0.13.0.tar.gz