1 Feb
2024
1 Feb
'24
2:02 p.m.
Hello,
GitHub offers two downloads: mbedtls-${version}.tar.gz and v${version}.tar.gz. (That's because GitHub releases have to have a tag called v${version}, and in addition there's the tag naming scheme we normally use which is mbedtls-${version}.) They're identical apart from the directory name. It looks like we mixed up the checksums in the release announcements: they're the checksums of the v files but we give the names of the mbedtls- files. Sorry for the confusion, I'll go and fix the release announcements.
Best regards,
--
Gilles Peskine
Mbed TLS developer
On 01/02/2024 14:44, Wojtek Porczyk via mbed-tls wrote:
> Hello, list,
>
> Release notes for Mbed TLS 3.5.2 [0] have this:
>
> The SHA256 hashes for the archives are:
> 35890edf1a2c7a7e29eac3118d43302c3e1173e0df0ebaf5db56126dabe5bb05 mbedtls-3.5.2.tar.gz
> 55c1525e7d5de18b84a1d1e5540950b4a3bac70e02889cf309919b2877cba63b mbedtls-3.5.2.zip
>
> However, attempting to download mbedtls-3.5.2.tar.gz yields a file with hash:
>
> eedecc468b3f8d052ef05a9d42bf63f04c8a1c50d1c5a94c251c681365a2c723
>
> What's going on with those hashes?
>
>
> [0]: https://github.com/Mbed-TLS/mbedtls/releases/tag/v3.5.2
> https://web.archive.org/web/20240126105153/https://github.com/Mbed-TLS/mbedt...
>
>