sqlite3 archive is not properly signed

[f.calboli@…]

The following installed ports are outdated:
sqlite3                        3.7.15.1_0 < 3.7.15.2_0   
yyyyyy@xxxxxxy:~$ sudo port -u upgrade outdated 
--->  Computing dependencies for sqlite3
--->  Fetching archive for sqlite3
--->  Attempting to fetch sqlite3-3.7.15.2_0.darwin_12.x86_64.tbz2 from http://jog.id.packages.macports.org/macports/packages/sqlite3
--->  Attempting to fetch sqlite3-3.7.15.2_0.darwin_12.x86_64.tbz2.rmd160 from http://jog.id.packages.macports.org/macports/packages/sqlite3
Error: org.macports.archivefetch for port sqlite3 returned: Failed to verify signature for archive!
Please see the log file for port sqlite3 for details:
    /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_release_tarballs_ports_databases_sqlite3/sqlite3/main.log
Error: Unable to upgrade port: 1
To report a bug, follow the instructions in the guide:
    http://guide.macports.org/#project.tickets

[ryandesign (Ryan Carsten Schmidt)]

I don't know why that would be.

[neverpanic (Clemens Lang)]

Downloading from the jog.id and mse.uk mirror both give me the same file (and signature). I have also verified the file against the macports pubkey and it comes back correct.

Maybe a bit flipped while you were downloading?

[f.calboli@…]

Replying to cal@…:

Downloading from the jog.id and mse.uk mirror both give me the same file (and signature). I have also verified the file against the macports pubkey and it comes back correct.

Maybe a bit flipped while you were downloading?

from logs I see:

:debug:archivefetch failed verification with key /opt/local/share/macports/macports-pubkey.pem :debug:archivefetch openssl output: Verification Failure child process exited abnormally :error:archivefetch org.macports.archivefetch for port sqlite3 returned: Failed to verify signature for archive! :debug:archivefetch Error code: NONE :debug:archivefetch Backtrace: Failed to verify signature for archive!

while executing

"portarchivefetch::fetchfiles"

(procedure "portarchivefetch::archivefetch_main" line 5) invoked from within

"$procedure $targetname" :info:archivefetch Warning: targets not executed for sqlite3: org.macports.install org.macports.archivefetch org.macports.fetch org.macports.checksum org.macports.extract org.macports.patch org.macports.configure org.macports.build org.macports.destroot :notice:archivefetch Please see the log file for port sqlite3 for details:

/opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_release_tarballs_ports_databases_sqlite3/sqlite3/main.log

do I need to delete /opt/local/share/macports/macports-pubkey.pem?

BW

F

[jmroot (Joshua Root)]

Without macports-pubkey.pem you won't be able to verify any signatures at all. Are you having signature verification failures with every archive or just sqlite3?

[f.calboli@…]

Replying to jmr@…:

Without macports-pubkey.pem you won't be able to verify any signatures at all. Are you having signature verification failures with every archive or just sqlite3?

only with sqlite3 that I know of, but that's the only port that needed upgrade. The issue seems to be resolved btw, so feel free to clse the ticket