Opened 8 years ago

Last modified 8 years ago

#50835 closed defect

qt4-mac Failed to verify signature for archive! — at Initial Version

Reported by: jorgeantoniorivera@… Owned by: macports-tickets@…
Priority: Normal Milestone:
Component: ports Version: 2.3.4
Keywords: Cc: eborisch (Eric A. Borisch)
Port: qt4-mac

Description

I trying to install it, I get a suspicious error.

The rmd160 signature in the Portfile is different than the downloaded file.

Is a security problem?

What is the correct signature for this file?

Best regards.

Port install log:


---> Attempting to fetch qt4-mac-4.8.7_4.darwin_12.x86_64.tbz2.rmd160 from http://packages.macports.org/qt4-mac Warning: Failed to verify signature for archive! Error: org.macports.archivefetch for port qt4-mac returned: archivefetch failed for qt4-mac @4.8.7_4 Please see the log file for port qt4-mac for details:

/opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_release_tarballs_ports_aqua_qt4-mac/qt4-mac/main.log

Error: Unable to upgrade port: 1 Error: Unable to execute port: upgrade qt4-mac failed


My check dsgt:


RIPEMD160(/tmp/qt4-mac-4.8.7_4.darwin_12.x86_64.tbz2)= 1d4a5db59629f516de6d5cec4e6ae72ddc8d0d25

Portfile contents:


checksums rmd160 afb5e5a99388e6429faca59cb5000054feffd166 \

sha256 e2882295097e47fe089f8ac741a95fef47e0a73a3f3cdf21b56990638f626ea0

Change History (0)

Note: See TracTickets for help on using tickets.