diff --git a/.github/workflows/linux.yml b/.github/workflows/linux.yml
index 13456b0b..772772dd 100644
--- a/.github/workflows/linux.yml
+++ b/.github/workflows/linux.yml
@@ -18,37 +18,37 @@ jobs:
       matrix:
         cip:
           - alien_build_install_extra: 1
-            tag: "5.39"
+            tag: "5.41"
           - alien_build_install_extra: 1
             env: ALIEN_BUILD_LIVE_TEST=1
-            tag: "5.38-alpine3.16"
+            tag: "5.40-alpine3.16"
           - alien_build_install_extra: 1
             env: ALIEN_BUILD_LIVE_TEST=1
-            tag: "5.38-bionic"
+            tag: "5.40-bionic"
           - alien_build_install_extra: 1
             env: ALIEN_BUILD_LIVE_TEST=1
-            tag: "5.38-fedora36"
+            tag: "5.40-fedora36"
           - alien_build_install_extra: 0
             env: ALIEN_BUILD_LIVE_TEST=0
-            tag: "5.38-bullseye"
+            tag: "5.40-bullseye"
           - alien_build_install_extra: 1
             env: ALIEN_BUILD_LIVE_TEST=1
-            tag: "5.38-bullseye"
+            tag: "5.40-bullseye"
           - alien_build_install_extra: 1
             env: ALIEN_DOWNLOAD_RULE=warn
-            tag: "5.38"
+            tag: "5.40"
           - alien_build_install_extra: 1
             env: ALIEN_DOWNLOAD_RULE=digest
-            tag: "5.38"
+            tag: "5.40"
           - alien_build_install_extra: 1
             env: ALIEN_DOWNLOAD_RULE=encrypt
-            tag: "5.38"
+            tag: "5.40"
           - alien_build_install_extra: 1
             env: ALIEN_DOWNLOAD_RULE=digest_or_encrypt
-            tag: "5.38"
+            tag: "5.40"
           - alien_build_install_extra: 1
             env: ALIEN_DOWNLOAD_RULE=digest_and_encrypt
-            tag: "5.38"
+            tag: "5.40"
           - alien_build_install_extra: 1
             tag: "5.38"
           - alien_build_install_extra: 1
diff --git a/lib/Alien/Build.pm b/lib/Alien/Build.pm
index b92da27b..8b9fe956 100644
--- a/lib/Alien/Build.pm
+++ b/lib/Alien/Build.pm
@@ -1734,7 +1734,7 @@ sub extract
     }
     elsif($self->download_rule eq 'digest_and_encrypt')
     {
-      die "file was fetched insecurely and required digest missing for $archive" unless $checked_digest && $encrypted_fetch;
+      die "file was fetched insecurely and required digest missing for $archive" unless $checked_digest || $encrypted_fetch;
       die "required digest missing for $archive" unless $checked_digest;
       die "file was fetched insecurely for $archive" unless $encrypted_fetch;
     }