Opened 11 years ago

Closed 11 years ago

#39896 closed defect (fixed)

tig @1.1: checksum mismatch (possible stealth-update?)

Reported by: cooljeanius (Eric Gallager) Owned by: neverpanic (Clemens Lang)
Priority: Normal Milestone:
Component: ports Version: 2.2.0
Keywords: Cc: ryandesign (Ryan Carsten Schmidt)
Port: tig

Description

DEBUG: Executing org.macports.fetch (tig)
--->  tig-1.1.tar.gz doesn't seem to exist in /opt/local/var/macports/distfiles/tig/1.1_1
--->  Attempting to fetch tig-1.1.tar.gz from https://github.com/jonas/tig/tarball/tig-1.1
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
110260   125  110260  107k    0     0  28359      0 --:--:--  0:00:03 --:--:--  176k
DEBUG: Privilege de-escalation not attempted as not running as root.
DEBUG: checksum phase started at Mon Jul 29 15:47:05 EDT 2013
--->  Verifying checksums for tig
DEBUG: Executing org.macports.checksum (tig)
--->  Checksumming tig-1.1.tar.gz
Error: Checksum (rmd160) mismatch for tig-1.1.tar.gz
Portfile checksum: tig-1.1.tar.gz rmd160 a044dfc5e842910cdc0a18a05333472a17815b87
Distfile checksum: tig-1.1.tar.gz rmd160 b2a32bba14a359115461a5ff89493d5ac0cebf60
Error: Checksum (sha256) mismatch for tig-1.1.tar.gz
Portfile checksum: tig-1.1.tar.gz sha256 c14233fb383b8d09ff6ff4af3af92d26fa08464830800d45f72821c23677d719
Distfile checksum: tig-1.1.tar.gz sha256 7c55d2f5d0df6387175e7d431559d72e95b51d1dca82fa64f98b7d716e93bce5
The correct checksum line may be:
checksums           rmd160  b2a32bba14a359115461a5ff89493d5ac0cebf60 \
                    sha256  7c55d2f5d0df6387175e7d431559d72e95b51d1dca82fa64f98b7d716e93bce5
Error: org.macports.checksum for port tig returned: Unable to verify file checksums

Change History (2)

comment:1 Changed 11 years ago by ryandesign (Ryan Carsten Schmidt)

Cc: ryandesign@… added; cal@… removed
Owner: changed from macports-tickets@… to cal@…

This happened before, 2 months ago, in #39318; unfortunately the ticket did not explain what was discovered about why the mismatch occurred or what the differences were between the old and new archives.

comment:2 Changed 11 years ago by ryandesign (Ryan Carsten Schmidt)

Resolution: fixed
Status: newclosed

In fact it looks like the distfile on the server is back to the way it was before #39318.

The contents of the two distfiles is identical except for the top-level directory name, which used to be (and now is again) jonas-tig-b9393b7 and for awhile was jonas-tig-121fda4.

I recall this same kind of temporary distfile change was observed for another port that downloads from github. Perhaps github had for a time screwed up their release tarball serving service and then corrected it.

Reverted r106632 in r108660.

Note: See TracTickets for help on using tickets.