gnuplot @5.0.4_0: Checksum mismatch for gnuplot-5.0.4.tar.gz

[anowacki (Andy Nowacki)]

It appears that the checksums for the gnuplot portfile at r150921 may be invalid. Trying to upgrade from 5.0.3_0 does the following:

$ port outdated
The following installed ports are outdated:
gnuplot                        5.0.3_0 < 5.0.4_0         
$ sudo port clean --all gnuplot && sudo port -v upgrade gnuplot
--->  Cleaning gnuplot
--->  Computing dependencies for gnuplot.
--->  Fetching archive for gnuplot
--->  gnuplot-5.0.4_0+aquaterm+luaterm+pangocairo+wxwidgets+x11.darwin_14.x86_64.tbz2 doesn't seem to exist in /opt/local/var/macports/incoming/verified
--->  Attempting to fetch gnuplot-5.0.4_0+aquaterm+luaterm+pangocairo+wxwidgets+x11.darwin_14.x86_64.tbz2 from https://packages.macports.org/gnuplot
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0--->  Attempting to fetch gnuplot-5.0.4_0+aquaterm+luaterm+pangocairo+wxwidgets+x11.darwin_14.x86_64.tbz2 from http://mse.uk.packages.macports.org/sites/packages.macports.org/gnuplot
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   328  100   328    0     0   6558      0 --:--:-- --:--:-- --:--:--  6693
--->  Attempting to fetch gnuplot-5.0.4_0+aquaterm+luaterm+pangocairo+wxwidgets+x11.darwin_14.x86_64.tbz2 from http://lil.fr.packages.macports.org/gnuplot
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0--->  Fetching distfiles for gnuplot
--->  gnuplot-5.0.4.tar.gz doesn't seem to exist in /opt/local/var/macports/distfiles/gnuplot/5.0.4
--->  Attempting to fetch gnuplot-5.0.4.tar.gz from http://heanet.dl.sourceforge.net/project/gnuplot/gnuplot/5.0.4
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 4932k  100 4932k    0     0  15.4M      0 --:--:-- --:--:-- --:--:-- 15.4M
--->  Verifying checksums for gnuplot
--->  Checksumming gnuplot-5.0.4.tar.gz
Error: Checksum (rmd160) mismatch for gnuplot-5.0.4.tar.gz
Portfile checksum: gnuplot-5.0.4.tar.gz rmd160 077345c360cf4faa34430ffe07e6cefc3d822c3c
Distfile checksum: gnuplot-5.0.4.tar.gz rmd160 117dcae3d2b1e0cc33ef367c0227174f18c3da15
Error: Checksum (sha256) mismatch for gnuplot-5.0.4.tar.gz
Portfile checksum: gnuplot-5.0.4.tar.gz sha256 151cb845728bde75eb9d1561b35140114a05a7c52a52bd35b4b2b3d944e0c31e
Distfile checksum: gnuplot-5.0.4.tar.gz sha256 27897103153ec5c8efd517df9bbe690246aaaa9a59a2ce18eb88d08228ac7723
The correct checksum line may be:
checksums           rmd160  117dcae3d2b1e0cc33ef367c0227174f18c3da15 \
                    sha256  27897103153ec5c8efd517df9bbe690246aaaa9a59a2ce18eb88d08228ac7723
Error: Failed to checksum gnuplot: Unable to verify file checksums
Error: See /opt/local/var/macports/logs/_Users_nowacki_Applications_macports_trunk_dports_math_gnuplot/gnuplot/main.log for details.
Error: Follow http://guide.macports.org/#project.tickets to report a bug.

[mojca (Mojca Miklavec)]

Gnuplot developers silently changed the file once, but that was immediately after the initial release. I hope this isn't the second time (and that I didn't accidentally end up with the old file). I need to look into precise checksums. Arhhhh.

[mojca (Mojca Miklavec)]

The best I can advise is to try to delete /opt/local/var/macports/distfiles/gnuplot/5.0.4 and start again. But I find it strange that you would still get the old file from somewhere. The file was replaced on 21st of July.

I can reproduce the problem though:

$ wget http://heanet.dl.sourceforge.net/project/gnuplot/gnuplot/5.0.4/gnuplot-5.0.4.tar.gz
$ shasum-5.24 -a 256 gnuplot-5.0.4.tar.gz 
27897103153ec5c8efd517df9bbe690246aaaa9a59a2ce18eb88d08228ac7723  gnuplot-5.0.4.tar.gz

$ wget http://vorboss.dl.sourceforge.net/project/gnuplot/gnuplot/5.0.4/gnuplot-5.0.4.tar.gz
$ shasum-5.24 -a 256 gnuplot-5.0.4.tar.gz.1 
151cb845728bde75eb9d1561b35140114a05a7c52a52bd35b4b2b3d944e0c31e  gnuplot-5.0.4.tar.gz.1

Maybe the mirror is out of date?

[mojca (Mojca Miklavec)]

Or get the file from ​http://distfiles.macports.org/gnuplot/5.0.4/

[anowacki (Andy Nowacki)]

Okay, thanks for pointing that out. I'm afraid I couldn't work out how to set a different mirror to try that, or indeed where to find the alternative addresses for them. I guess the solution for now is to blacklist the heanet mirror until it's updated.

[mojca (Mojca Miklavec)]

You can also get the file manually from macports.org and move it to /opt/local/var/macports/distfiles/gnuplot/5.0.4.

[mojca (Mojca Miklavec)]

I hope the problem was fixed earlier, but I just updated gnuplot to 5.0.5 in r153813, so hopefully all the problems related to the checksum mismatch should finally be gone by now.