gdk-pixbuf2 @2.42.8_0 failed archive signature verification

[bunk3m (Bunk3m)]

While doing an "upgrade outdated", my update is failing on the update of pixbuf2. It appears to be either a file availability or a file verification error.

Log is below

version:1
:debug:main Starting logging for gdk-pixbuf2 @2.42.8_0
:debug:sysinfo macOS 10.14.6 (darwin/18.7.0) arch i386
:debug:sysinfo MacPorts 2.7.2
:debug:sysinfo Xcode none
:debug:sysinfo SDK 10.14
:debug:sysinfo MACOSX_DEPLOYMENT_TARGET: 10.14
:msg:main --->  Computing dependencies for gdk-pixbuf2:info:main .:debug:main Checking for conflicts against gdk-pixbuf2
:debug:main Searching for dependency: gdk-pixbuf2-devel
:debug:main Didn't find receipt, going to depspec regex for: gdk-pixbuf2-devel
:debug:main Searching for dependency: glib2
:debug:main Found Dependency: receipt exists for glib2
:debug:main Searching for dependency: gobject-introspection
:debug:main Found Dependency: receipt exists for gobject-introspection
:debug:main Searching for dependency: shared-mime-info
:debug:main Found Dependency: receipt exists for shared-mime-info
:debug:main Searching for dependency: libpng
:debug:main Found Dependency: receipt exists for libpng
:debug:main Searching for dependency: libjpeg-turbo
:debug:main Found Dependency: receipt exists for libjpeg-turbo
:debug:main Searching for dependency: tiff
:debug:main Found Dependency: receipt exists for tiff
:debug:main Executing org.macports.main (gdk-pixbuf2)
:debug:main dropping privileges: euid changed to 502, egid changed to 501.
:debug:archivefetch archivefetch phase started at Wed Jun  1 13:20:03 EDT 2022
:msg:archivefetch --->  Fetching archive for gdk-pixbuf2
:debug:archivefetch Executing org.macports.archivefetch (gdk-pixbuf2)
:debug:archivefetch euid/egid changed to: 0/0
:debug:archivefetch chowned /opt/local/var/macports/incoming to macports
:debug:archivefetch euid/egid changed to: 502/501
:info:archivefetch --->  gdk-pixbuf2-2.42.8_0.darwin_18.x86_64.tbz2 doesn't seem to exist in /opt/local/var/macports/incoming/verified
:msg:archivefetch --->  Attempting to fetch gdk-pixbuf2-2.42.8_0.darwin_18.x86_64.tbz2 from http://packages.macports.org/gdk-pixbuf2
:msg:archivefetch --->  Attempting to fetch gdk-pixbuf2-2.42.8_0.darwin_18.x86_64.tbz2.rmd160 from http://packages.macports.org/gdk-pixbuf2
:debug:archivefetch failed verification with key /opt/local/share/macports/macports-pubkey.pem
:debug:archivefetch openssl output: Verification Failure
:debug:archivefetch child process exited abnormally
:warn:archivefetch Failed to verify signature for archive!
:error:archivefetch Failed to archivefetch gdk-pixbuf2: version @2.42.8_0
:debug:archivefetch Error code: NONE
:debug:archivefetch Backtrace: version @2.42.8_0
:debug:archivefetch     while executing
:debug:archivefetch "error "version @[option version]_[option revision][option portvariants]""
:debug:archivefetch     (procedure "portarchivefetch::fetchfiles" line 144)
:debug:archivefetch     invoked from within
:debug:archivefetch "portarchivefetch::fetchfiles"
:debug:archivefetch     (procedure "portarchivefetch::archivefetch_main" line 5)
:debug:archivefetch     invoked from within
:debug:archivefetch "$procedure $targetname"
:error:archivefetch See /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_release_tarballs_ports_graphics_gdk-pixbuf2/gdk-pixbuf2/main.log for details.

[mascguy (Christopher Nielsen)]

Can you run sudo port selfupdate, and then try your update again?

Potentially helpful/related info: issue:56704

[bunk3m (Bunk3m)]

I did a port clean and then sudo port selfupdate and am still having the same problem.

--->  Computing dependencies for gdk-pixbuf2
--->  Fetching archive for gdk-pixbuf2
--->  Attempting to fetch gdk-pixbuf2-2.42.8_0.darwin_18.x86_64.tbz2 from http://packages.macports.org/gdk-pixbuf2
--->  Attempting to fetch gdk-pixbuf2-2.42.8_0.darwin_18.x86_64.tbz2.rmd160 from http://packages.macports.org/gdk-pixbuf2
Warning: Failed to verify signature for archive!
Error: Failed to archivefetch gdk-pixbuf2: version @2.42.8_0
Error: See /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_release_tarballs_ports_graphics_gdk-pixbuf2/gdk-pixbuf2/main.log for details.

I uploaded the newest log file also.

Having looked at the issue:56704, I can see there are parallels but not sure what or how to use it fix this.

[ryandesign (Ryan Carsten Schmidt)]

Did you try the two suggestions I made in comment:ticket:56704:2?

[bunk3m (Bunk3m)]

Yes, I think I did. 1) I checked the permissions for /private/tmp which are drwxrwxrwt 20 root wheel 2) Disable virus checker: no change

I downloaded the files using wget but I can't verify this with the code on that page. I don't understand the command so I tried to mimic what was there but I've got something wrong. I don't know what needs to be verified against what. Sorry, I'm a bit of a newbie.

openssl dgst -ripemd160 -verify /opt/local/share/macports/macports-pubkey.pem-signature gdk-pixbuf2-2.42.8_0.darwin_18.x86_64.tbz2.rmd160 gdk-pixbuf2-2.42.8_0.darwin_18.x86_64.tbz2
dgst: Can only sign or verify one file.

[bunk3m (Bunk3m)]

Very strange ... it looks like it's working now. It's extremely slow but looks OK. Very strange indeed.

--->  Computing dependencies for gdk-pixbuf2
--->  Fetching archive for gdk-pixbuf2
--->  Attempting to fetch gdk-pixbuf2-2.42.8_0.darwin_18.x86_64.tbz2 from http://packages.macports.org/gdk-pixbuf2
--->  Attempting to fetch gdk-pixbuf2-2.42.8_0.darwin_18.x86_64.tbz2.rmd160 from http://packages.macports.org/gdk-pixbuf2
--->  Installing gdk-pixbuf2 @2.42.8_0
--->  Cleaning gdk-pixbuf2
--->  Computing dependencies for gdk-pixbuf2
--->  Deactivating gdk-pixbuf2 @2.42.2_2+x11
--->  Cleaning gdk-pixbuf2
--->  Activating gdk-pixbuf2 @2.42.8_0
--->  Cleaning gdk-pixbuf2

[mascguy (Christopher Nielsen)]

Replying to bunk3m:

Very strange ... it looks like it's working now. It's extremely slow but looks OK. Very strange indeed.

Great, glad that the issue is resolved!