go-server-14.2.0-377.deb checksums don't match (nor go-agent.deb, go-server.zip, go-agent.zip)

details.log

###### go-server.deb ###########################################################
$ curl -O http://download.go.cd/gocd-deb/go-server-14.2.0-377.deb

###### SHA1
$ echo "5f66e4effde11695f606270ea0eb27eb36226033 go-server-14.2.0-377.deb" | sha1sum -c -
go-server-14.2.0-377.deb: FAILED
sha1sum: WARNING: 1 computed checksum did NOT match
$ sha1sum go-server-14.2.0-377.deb
77da6bab514c386f4a41304ab9dc66504bf385b0  go-server-14.2.0-377.deb

###### MD5
$ echo "e186360644197b875b00177cf1c46263 go-server-14.2.0-377.deb" | md5sum -c -
go-server-14.2.0-377.deb: FAILED
md5sum: WARNING: 1 computed checksum did NOT match
$ md5sum go-server-14.2.0-377.deb
0b3dd3088c3ed2a1b289fd61edbdacf0  go-server-14.2.0-377.deb

###### go-agent.deb ############################################################
$ curl -O http://download.go.cd/gocd-deb/go-agent-14.2.0-377.deb

###### SHA1
$ echo "365388d36f84e7a47177217f372ae128380e04f1  go-agent-14.2.0-377.deb" | sha1sum -c -
go-agent-14.2.0-377.deb: FAILED
sha1sum: WARNING: 1 computed checksum did NOT match

###### MD5 go-agent.deb
$ echo "0d40b050db745733bf79102d708d4106  go-agent-14.2.0-377.deb" | md5sum -c -
go-agent-14.2.0-377.deb: FAILED
md5sum: WARNING: 1 computed checksum did NOT match
$ md5sum go-agent-14.2.0-377.deb
c8186761e4da46b397afc8a0e7978c0e  go-agent-14.2.0-377.deb

###### go-server.zip ###########################################################
$ curl -O http://download.go.cd/gocd/go-server-14.2.0-377.zip

###### SHA1
$ echo "bc8d09556d8c6f160ea74d6b8e44c9d63bb23b78  go-server-14.2.0-377.zip" | sha1sum -c -
go-server-14.2.0-377.zip: FAILED
sha1sum: WARNING: 1 computed checksum did NOT match
$ sha1sum go-server-14.2.0-377.zip
9fe38fac93655f4c08ea8a2626a9172f0cc05948  go-server-14.2.0-377.zip

###### MD5
$ echo "132ec57ba83f7939cf8627401d0a6336  go-server-14.2.0-377.zip" | md5sum -c -
go-server-14.2.0-377.zip: FAILED
md5sum: WARNING: 1 computed checksum did NOT match
$ md5sum go-server-14.2.0-377.zip
4a32dda6835c798357965ab9dfe467c7  go-server-14.2.0-377.zip

###### go-agent.zip ############################################################
$ curl -O http://download.go.cd/gocd/go-agent-14.2.0-377.zip

###### SHA1
$ echo "8ab128c9aae4ad1c8b61b5dcb66c5c3d19d5fbd7  go-agent-14.2.0-377.zip" | sha1sum -c -
go-agent-14.2.0-377.zip: FAILED
sha1sum: WARNING: 1 computed checksum did NOT match
$ sha1sum go-agent-14.2.0-377.zip
4bdd46eb8cbec91225bbc1ba85791e6a4f9ac365  go-agent-14.2.0-377.zip

###### MD5
$ echo "ffea04eaa42e22287b2f3da0e06dd5c5  go-agent-14.2.0-377.zip" | md5sum -c -
go-agent-14.2.0-377.zip: FAILED
md5sum: WARNING: 1 computed checksum did NOT match
$ md5sum go-agent-14.2.0-377.zip
8c8b90adfbed20da3ee6a330cb4e2426  go-agent-14.2.0-377.zip

snippet.html

<!-- collected from http://www.go.cd/download/ on 2014-10-30 at 11:20 MDT -->
<li class="supported"><div style="float:left; font-weight: bold;">supported release</div><div style="clear: left; float:left;"><span class="version">14.2.0-377</span><span class="revision-link"> (<a target="_blank" href="http://www.github.com/gocd/gocd/commit/d8a2866d6af85ed02861355c7dfa621ff34d78ca">d8a2866d6af85ed02861355c7dfa621ff34d78ca</a>)</span><span class="time-stamp" title="Tue Jul 08 2014 04:41:19 GMT-0600 (MDT)">4 months ago</span></div><div class="link-holder"><div class="links"><span><a id="LinuxDeb-Server_14.2.0-377" class="icon-download" href="http://download.go.cd/gocd-deb/go-server-14.2.0-377.deb">Server</a></span> + <span><a id="LinuxDeb-Agent_14.2.0-377" class="icon-download" href="http://download.go.cd/gocd-deb/go-agent-14.2.0-377.deb">Agent</a></span></div><div><div class="sha1" style="display: block;"><div> <b>Server MD5</b> e186360644197b875b00177cf1c46263 </div><div> <b>Server SHA1</b> 5f66e4effde11695f606270ea0eb27eb36226033</div></div><div class="md5" style="display: block;"><div> <b>Agent MD5</b> 0d40b050db745733bf79102d708d4106 </div><div> <b>Agent SHA1</b> 365388d36f84e7a47177217f372ae128380e04f1 </div></div></div></div></li>

curl -O is downloading the redirection page. The content is something like this:

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="http://dl.bintray.com/gocd/gocd-deb/go-server-14.2.0-377.deb">here</a>.</p>
<hr>
<address>Apache/2.2.15 (CentOS) Server at download.go.cd Port 80</address>
</body></html>

You need curl -L -O to make it follow the redirect and get the whole file. I think the checksum matches at that point.

$ curl -L -O http://download.go.cd/gocd-deb/go-server-14.2.0-377.deb

$ echo "5f66e4effde11695f606270ea0eb27eb36226033 go-server-14.2.0-377.deb" | sha1sum -c -
go-server-14.2.0-377.deb: OK

Sure enough. That worked for me also:

$ curl -L -O http://download.go.cd/gocd-deb/go-server-14.2.0-377.deb
$ curl -L -O http://download.go.cd/gocd-deb/go-agent-14.2.0-377.deb
$ echo "5f66e4effde11695f606270ea0eb27eb36226033 go-server-14.2.0-377.deb" | sha1sum -c -
go-server-14.2.0-377.deb: OK
$ echo "365388d36f84e7a47177217f372ae128380e04f1 go-agent-14.2.0-377.deb" | sha1sum -c -
go-agent-14.2.0-377.deb: OK

But I don't understand why it works or how I could have discovered that for myself. Any suggestions?