p5.26-io-socket-ssl: unable to verify file checksums

[conradwt (Conrad Taylor)]

I'm seeing the following issue while trying to upgrade outdated ports:

sudo port selfupdate && sudo port -p -u upgrade outdated

version:1
:debug:main Starting logging for p5.26-io-socket-ssl @2.71.0_0
:debug:sysinfo macOS 11.4 (darwin/20.5.0) arch i386
:debug:sysinfo MacPorts 2.7.1
:debug:sysinfo Xcode 12.5
:debug:sysinfo SDK 10.15
:debug:sysinfo MACOSX_DEPLOYMENT_TARGET: 11.0
:msg:main --->  Computing dependencies for p5.26-io-socket-ssl:info:main .:debug:main p5.26-io-socket-ssl has no conflicts
:debug:main Searching for dependency: p5.26-io-socket-inet6
:debug:main Found Dependency: receipt exists for p5.26-io-socket-inet6
:debug:main Searching for dependency: p5.26-io-socket-ip
:debug:main Found Dependency: receipt exists for p5.26-io-socket-ip
:debug:main Searching for dependency: perl5.26
:debug:main Found Dependency: receipt exists for perl5.26
:debug:main Searching for dependency: p5.26-mozilla-ca
:debug:main Found Dependency: receipt exists for p5.26-mozilla-ca
:debug:main Searching for dependency: p5.26-net-libidn
:debug:main Found Dependency: receipt exists for p5.26-net-libidn
:debug:main Searching for dependency: p5.26-net-ssleay
:debug:main Found Dependency: receipt exists for p5.26-net-ssleay
:debug:main Executing org.macports.main (p5.26-io-socket-ssl)
:debug:main dropping privileges: euid changed to 502, egid changed to 501.
:debug:archivefetch archivefetch phase started at Sat Jun  5 09:17:27 PDT 2021
:msg:archivefetch --->  Fetching archive for p5.26-io-socket-ssl
:warn:archivefetch Your DNS servers incorrectly claim to know the address of nonexistent hosts. This may cause checksum mismatches for some ports. See this page for more information: <https://trac.macports.org/wiki/MisbehavingServers>
:debug:archivefetch Executing org.macports.archivefetch (p5.26-io-socket-ssl)
:debug:archivefetch euid/egid changed to: 0/0
:debug:archivefetch chowned /opt/local/var/macports/incoming to macports
:debug:archivefetch euid/egid changed to: 502/501
:info:archivefetch --->  p5.26-io-socket-ssl-2.71.0_0.darwin_20.noarch.tbz2 doesn't seem to exist in /opt/local/var/macports/incoming/verified
:msg:archivefetch --->  Attempting to fetch p5.26-io-socket-ssl-2.71.0_0.darwin_20.noarch.tbz2 from https://packages.macports.org/p5.26-io-socket-ssl
:debug:archivefetch Fetching archive failed: The requested URL returned error: 404 
:msg:archivefetch --->  Attempting to fetch p5.26-io-socket-ssl-2.71.0_0.darwin_20.noarch.tbz2 from https://ywg.ca.packages.macports.org/mirror/macports/packages/p5.26-io-socket-ssl
:debug:archivefetch Fetching archive failed: The requested URL returned error: 404 Not Found
:msg:archivefetch --->  Attempting to fetch p5.26-io-socket-ssl-2.71.0_0.darwin_20.noarch.tbz2 from https://kmq.jp.packages.macports.org/p5.26-io-socket-ssl
:debug:archivefetch Fetching archive failed: The requested URL returned error: 404 Not Found
:debug:archivefetch Privilege de-escalation not attempted as not running as root.
:debug:archivefetch Skipping completed org.macports.fetch (p5.26-io-socket-ssl)
:debug:archivefetch Privilege de-escalation not attempted as not running as root.
:debug:checksum checksum phase started at Sat Jun  5 09:17:31 PDT 2021
:notice:checksum --->  Verifying checksums for p5.26-io-socket-ssl
:debug:checksum Executing org.macports.checksum (p5.26-io-socket-ssl)
:info:checksum --->  Checksumming IO-Socket-SSL-2.071.tar.gz
:debug:checksum Calculated (rmd160) is 9c1185a5c5e9fc54612808977ee8f548b2258d31
:error:checksum Checksum (rmd160) mismatch for IO-Socket-SSL-2.071.tar.gz
:info:checksum Portfile checksum: IO-Socket-SSL-2.071.tar.gz rmd160 4eb64fa2acc691675e02e4ad63f7643a14f313f7
:info:checksum Distfile checksum: IO-Socket-SSL-2.071.tar.gz rmd160 9c1185a5c5e9fc54612808977ee8f548b2258d31
:debug:checksum Calculated (sha256) is e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
:error:checksum Checksum (sha256) mismatch for IO-Socket-SSL-2.071.tar.gz
:info:checksum Portfile checksum: IO-Socket-SSL-2.071.tar.gz sha256 40da40948ecc9c787ed39c95715872679eebfd54243721174993a2003e32ab0a
:info:checksum Distfile checksum: IO-Socket-SSL-2.071.tar.gz sha256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
:debug:checksum Calculated (size) is 0
:error:checksum Checksum (size) mismatch for IO-Socket-SSL-2.071.tar.gz
:info:checksum Portfile checksum: IO-Socket-SSL-2.071.tar.gz size 248367
:info:checksum Distfile checksum: IO-Socket-SSL-2.071.tar.gz size 0
:info:checksum The correct checksum line may be:
:info:checksum checksums           rmd160  9c1185a5c5e9fc54612808977ee8f548b2258d31 \
:info:checksum                     sha256  e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 \
:info:checksum                     size    0
:error:checksum Failed to checksum p5.26-io-socket-ssl: Unable to verify file checksums
:debug:checksum Error code: NONE
:debug:checksum Backtrace: Unable to verify file checksums
:debug:checksum     while executing
:debug:checksum "$procedure $targetname"
:error:checksum See /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_perl_p5-io-socket-ssl/p5.26-io-socket-ssl/main.log for details.

[reneeotten (Renee Otten)]

this works fine for me sudo port -dv checksum p5.26-io-socket-ssl, so I am not sure why it doesn't work for you... Can you please try to clean the port first sudo port -dv clean --all p5.26-io-socket-ssl and then try again? Also I notice this warning in the log you posted:

:warn:archivefetch Your DNS servers incorrectly claim to know the address of nonexistent hosts. This may cause checksum mismatches for some ports. See this page for more information: <https://trac.macports.org/wiki/MisbehavingServers>

please follow the instructions on the mentioned website.

[chrstphrchvz (Christopher Chavez)]

There is also the possibility of a bad distfile mirror, but the reporter’s log does not indicate which mirror it was fetched from. I would suggest doing port clean --all p5.26-io-socket-ssl and trying again.

I would also ask that someone please requeue the binary archive builds for p5.26-io-socket-ssl and other dependents of p5.26-socket.

[chrstphrchvz (Christopher Chavez)]

p5.26-io-socket-ssl was removed in [96a5edbb2a/macports-ports].

[ryandesign (Ryan Carsten Schmidt)]

Replying to conradwt:

:debug:checksum Calculated (size) is 0

Clearly the distfile you received, wherever you received it from, was faulty, since it was zero size.

Replying to reneeotten:

I notice this warning in the log you posted:

:warn:archivefetch Your DNS servers incorrectly claim to know the address of nonexistent hosts. This may cause checksum mismatches for some ports. See this page for more information: <https://trac.macports.org/wiki/MisbehavingServers>

Yes, and since there are several entries in the perl mirror list whose hostnames no longer resolve, it is possible that, because the user's DNS servers misbehave, these defunct hostnames now resolve to some different server that returns this bad result. We should remove those defunct entries, while also the user should switch to standards-compliant DNS servers to prevent similar problems in the future.

Replying to chrstphrchvz:

p5.26-io-socket-ssl was removed in [96a5edbb2a/macports-ports].

That is true, but since the port uses the same version of IO::Socket::SSL for each perl version, if there is a problem, then it still affects the remaining subports.