> I just downloaded that package and checked its signatures. I get a > mismatch for both: The checksums you got are the correct ones. For the record, here are the checksums for lua-5.3.1.tar.gz available at http://www.lua.org/ftp/lua-5.3.1.tar.gz MD5: 797adacada8d85761c079390ff1d9961 SHA1: 1676c6a041d90b6982db8cef1e5fb26000ab6dee These checksums are listed in http://www.lua.org/download.html http://www.lua.org/ftp/ So, only the announcement in lua-l was wrong. (It used the checksums for lua-5.3.0.tar.gz). I'm sorry for the noise. --lhf