Server 1.4.9 source checksums incorrect?

Server
1

I run the server under FreeNAS/FreeBSD, and build it from source. I always verify the SHA1 and MD5 checksums as found on Sourceforge (the ‘i’ button for ‘View Details’ after the tarball link). The sums for urbackup-server-1.4.9.tar.gz at http://sourceforge.net/projects/urbackup/files/Server/1.4.9/ don’t match my local values for the same-named tarball downloaded from http://www.urbackup.org/download.html, at the link for “UrBackup Server 1.4.9 Source Archive”, http://hndl.urbackup.org/Server/1.4.9/urbackup-server-1.4.9.tar.gz.

Sourceforge checksums:

SHA1 a1bcda50748bd6786a812ee7b8cacae31bf9e903
MD5  3452b47f727d5debf0f27bc64c0538d0

hndl.urbackup.org checksums:

SHA1 9f6423ed85716016e4effc8f455c13c1f9507a42
MD5  a591b75acc385e71df7f31f95e733ca8

Any idea why those two tarballs aren’t the same, and which is the one to be used?

2

I must have run the release script twice, causing it to repackage the archive. The contents are identical. I will take greater care to upload the same file next time.

As soon as https://letsencrypt.org/ is available I will also upgrade www.urbackup.org and hndl.urbackup.org to HTTPS, which would make sure that the files are not modified in any way.