archivefetch failed verification with key /opt/local/share/macports/macports-pubkey.pem

[psiqueira (Paul Siqueira)]

Since running selfupdate (2.5.2) and upgrading outdated a few months ago, I have been having a problem with my macport installation for the past several months.

What it amounts to is that it seems to be related to the public-key verification step when downloading and/or updating software. This happens whether I am installing wget, or any other software.

To fix the problem, I have gone so far as to re-install XQuartz and macports, but still to no avail. Hence, I am really stuck.

Below is the output from the log file that is associated with my most recent attempt at installing wget.

Any help or suggestions that you can give to get me over this hump that is crippling my system would be very much appreciated!

--- main.log ---

:debug:sysinfo macOS 10.13 (darwin/17.6.0) arch i386
:debug:sysinfo MacPorts 2.5.2
:debug:sysinfo Xcode 9.4.1
:debug:sysinfo SDK 10.13
:debug:sysinfo MACOSX_DEPLOYMENT_TARGET: 10.13
:debug:main dropping privileges: euid changed to 502, egid changed to 501.
:debug:main Executing org.macports.main (libiconv)
:debug:main Privilege de-escalation not attempted as not running as root.
:debug:archivefetch archivefetch phase started at Wed Jun 20 10:33:44 EDT 2018
:msg:archivefetch --->  Fetching archive for libiconv
:debug:archivefetch Executing org.macports.archivefetch (libiconv)
:debug:archivefetch euid/egid changed to: 0/0
:debug:archivefetch chowned /opt/local/var/macports/incoming to macports
:debug:archivefetch euid/egid changed to: 502/501
:info:archivefetch --->  libiconv-1.15_0.darwin_17.x86_64.tbz2 doesn't seem to exist in /opt/local/var/macports/incoming/verified
:msg:archivefetch --->  Attempting to fetch libiconv-1.15_0.darwin_17.x86_64.tbz2 from http://jog.id.packages.macports.org/macports/packages/libiconv
:msg:archivefetch --->  Attempting to fetch libiconv-1.15_0.darwin_17.x86_64.tbz2.rmd160 from http://jog.id.packages.macports.org/macports/packages/libiconv
:debug:archivefetch failed verification with key /opt/local/share/macports/macports-pubkey.pem
:debug:archivefetch openssl output: Verification Failure
:debug:archivefetch child process exited abnormally
:warn:archivefetch Failed to verify signature for archive!
:error:archivefetch Failed to archivefetch libiconv: version @1.15_0
:debug:archivefetch Error code: NONE
:debug:archivefetch Backtrace: version @1.15_0
:debug:archivefetch     while executing
:debug:archivefetch "error "version @[option version]_[option revision][option portvariants]""
:debug:archivefetch     (procedure "portarchivefetch::fetchfiles" line 144)
:debug:archivefetch     invoked from within
:debug:archivefetch "portarchivefetch::fetchfiles"
:debug:archivefetch     (procedure "portarchivefetch::archivefetch_main" line 5)
:debug:archivefetch     invoked from within
:debug:archivefetch "$procedure $targetname"
:error:archivefetch See /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_textproc_libiconv/libiconv/main.log for details.

[jmroot (Joshua Root)]

Downloading the archive and signature from the same server you're getting them from and verifying manually with openssl works fine here:

% openssl dgst -ripemd160 -verify /opt/local/share/macports/macports-pubkey.pem -signature libiconv-1.15_0.darwin_17.x86_64.tbz2.rmd160 libiconv-1.15_0.darwin_17.x86_64.tbz2
Verified OK

The archive, the signature or both must be getting corrupted in transit somehow. See wiki:MisbehavingServers for some ways that might be happening. Good luck, network issues like this can be tricky.