cmake: checksum mismatch

[ryandesign (Ryan Carsten Schmidt)]

I downloaded the cmake 2.8.1 distfile before you updated the checksums in r66243. Now, if I try to reinstall cmake 2.8.1, I get a checksum mismatch:

$ sudo port -v checksum cmake
--->  Computing dependencies for cmake.
--->  Fetching cmake
--->  Verifying checksum(s) for cmake
--->  Checksumming cmake-2.8.1.tar.gz
Error: Checksum (md5) mismatch for cmake-2.8.1.tar.gz
Portfile checksum: cmake-2.8.1.tar.gz md5 feadc2e5ebbfed0efc90178583503725
Distfile checksum: cmake-2.8.1.tar.gz md5 a92ad653f9ccc1595d16cd9707f49acc
Error: Checksum (sha1) mismatch for cmake-2.8.1.tar.gz
Portfile checksum: cmake-2.8.1.tar.gz sha1 e9f99cfccf8ec4fb5bbd8ca7d499771a2f1d4ebe
Distfile checksum: cmake-2.8.1.tar.gz sha1 fb93c8766a3bd71f2a824291717700c118d29be5
Error: Checksum (rmd160) mismatch for cmake-2.8.1.tar.gz
Portfile checksum: cmake-2.8.1.tar.gz rmd160 71e216704ee4313640efdbefcc65c6576071ef82
Distfile checksum: cmake-2.8.1.tar.gz rmd160 38b0876597def32a535d5305fb8f706ff29beabe
The correct checksum line may be:
checksums           md5     a92ad653f9ccc1595d16cd9707f49acc \
                    sha1    fb93c8766a3bd71f2a824291717700c118d29be5 \
                    rmd160  38b0876597def32a535d5305fb8f706ff29beabe
Error: Target org.macports.checksum returned: Unable to verify file checksums
Warning: the following items did not execute (for cmake): org.macports.checksum
Error: Status 1 encountered during processing.

When you update checksums for a stealth-update, you must also change the location to which the file will download, to prevent this kind of problem. The usual method would be to modify the dist_subdir, for example:

dist_subdir ${name}/${version}_1

If they stealth-update 2.8.1 again, you'll change it to ${name}/${version}_2. When they update to 2.8.2, you'll remove this line.

[cssdev]

Interesting, I didn't know how best to handle that situation. I need to watch the recipes more closely! My laptop is receiving some repairs at the moment, so I'm unable to make the change right now. Hopefully it should be back in my hands later this week.

[nospam@…]

which week? it's mismatched. :(

[cssdev]

Picking it up after work tonight. There is still port clean --dist to redownload!

[ryandesign (Ryan Carsten Schmidt)]

Fixed in r66570. I verified that the old and new tarballs expand to exactly the same contents, which would mean no revision bump would be necessary...

...except that r66243 not only changed the checksums for the stealth update, but also added a patchfile. What's the meaning of the patchfile? What does it do?

[ryandesign (Ryan Carsten Schmidt)]

Ah, looks like the patchfile does nothing, since it's not referenced at all from the portfile.

[cssdev]

Replying to ryandesign@…:

What's the meaning of the patchfile? What does it do?

It was an accidental commit related to #24252, which I'm verifying today. That will add a gui variant.