[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

problem with installer and our debian mirror



Hello,

We are running a debian mirror at ( http://techweb.rfa.org/debian/ ).

While it works mostly well, we are unfortunately haveing a problem with the
installer.  Specifically the file hw-detect-full_1.14_all.udeb returns a bad
md5sum.

If I compare the md5sum of that file locally on the filesystem it appears
fine:

    techweb:/tmp# wget http://ftp.us.debian.org/debian/pool/main/d/ddetect/hw-detect-full_1.14_all.udeb
    techweb:/tmp# md5sum /home/ftp/debian/pool/main/d/ddetect/hw-detect-full_1.14_all.udeb hw-detect-full_1.14_all.udeb
    5f371e52fca4376003fc7ff6b729d0df /home/ftp/debian/pool/main/d/ddetect/hw-detect-full_1.14_all.udeb
    5f371e52fca4376003fc7ff6b729d0df  hw-detect-full_1.14_all.udeb


If I compare the md5sum of that file on a remote system (coppied via ssh) it
also appears fine:

    grauf:/tmp/bing# scp grauf@techweb.rfa.org:/home/ftp/debian/pool/main/d/ddetect/hw-detect-full_1.14_all.udeb ./hw-detect-full_1.14_all.udeb_ssh
    grauf:/tmp/bing# wget http://ftp.us.debian.org/debian/pool/main/d/ddetect/hw-detect-full_1.14_all.udeb
    grauf:/tmp/bing# md5sum hw-detect-full_1.14_all.udeb hw-detect-full_1.14_all.udeb_ssh
    5f371e52fca4376003fc7ff6b729d0df  hw-detect-full_1.14_all.udeb
    5f371e52fca4376003fc7ff6b729d0df  hw-detect-full_1.14_all.udeb_ssh

Unfortunately if I download the file via our http server (apache 1.3 from
debian sarge, what the mirror server is running), the file gets modified:

    grauf:/tmp/bing# wget http://techweb.rfa.org/debian/pool/main/d/ddetect/hw-detect-full_1.14_all.udeb
    grauf:/tmp/bing# md5sum hw-detect-full_1.14_all.udeb hw-detect-full_1.14_all.udeb.1 hw-detect-full_1.14_all.udeb_ssh
    5f371e52fca4376003fc7ff6b729d0df  hw-detect-full_1.14_all.udeb
    2a155b6d0453ee2e3b5256aa2f620df1  hw-detect-full_1.14_all.udeb.1
    5f371e52fca4376003fc7ff6b729d0df  hw-detect-full_1.14_all.udeb_ssh

Briefly looking at the file with "hexdump -C", it appears that when sent over
http, a <carriage return><newline> at the end of the file is moved to the
start of the file.  The rest of the file appears the same (ie: it does not
"appear" compromised).  

    grauf:/tmp/bing# hexdump -C hw-detect-full_1.14_all.udeb | head -3
    00000000  21 3c 61 72 63 68 3e 0a  64 65 62 69 61 6e 2d 62  |!<arch>.debian-b|
    00000010  69 6e 61 72 79 20 20 20  31 31 30 37 33 38 32 34  |inary   11073824|
    00000020  36 39 20 20 30 20 20 20  20 20 30 20 20 20 20 20  |69  0     0     |
    grauf:/tmp/bing# hexdump -C hw-detect-full_1.14_all.udeb.1 | head -3
    00000000  0d 0a 21 3c 61 72 63 68  3e 0a 64 65 62 69 61 6e  |..!<arch>.debian|
    00000010  2d 62 69 6e 61 72 79 20  20 20 31 31 30 37 33 38  |-binary   110738|
    00000020  32 34 36 39 20 20 30 20  20 20 20 20 30 20 20 20  |2469  0     0   |
    grauf:/tmp/bing#
    grauf:/tmp/bing# hexdump -C hw-detect-full_1.14_all.udeb | tail -3
    00000a60  00 00 00 00 00 00 00 00  c0 85 3e 37 66 e2 c9 00  |..........>7f...|
    00000a70  28 00 00 0a                                       |(...|
    00000a74
    grauf:/tmp/bing# hexdump -C hw-detect-full_1.14_all.udeb.1 | tail -3
    00000a60  cf 01 00 00 00 00 00 00  00 00 c0 85 3e 37 66 e2  |............>7f.|
    00000a70  c9 00 28 00                                       |..(.|
    00000a74

This seems to be the only file that is causing this problem.  Most other
activities with our mirror work, except for the installer which complains a
bad md5sum on this particular file.

I have not seen this error before and would be grateful for tips from others
on how to correct it or further investigate it.

thank you,
donfede


-- 
Federico Grau
Free Software Developer and Sysadmin
Radio Free Asia
2025 M Street, NW
Suite 300
Washington, DC  20036
202-587-2046  Telephone
202-721-7468  Facsimile
CONFIDENTIAL COMMUNICATION
This e-mail message is intended only for the use of the addressee and may
contain information that is privileged and confidential.  Any unauthorized
dissemination, distribution, or copying is strictly prohibited.  If you
receive this transmission in error, please contact network@rfa.org.



Reply to: