checksum failure for curl-ca-bundle

[charlie.herron@…]

I tried it a second time after cleaning, same result. Here's the output from the second attempt (the download site is given there):

Macintosh-2:bin anomaly$ sudo ./port selfupdate
Password:
--->  Updating the ports tree
--->  Updating MacPorts base sources using rsync
MacPorts base version 1.9.2 installed,
MacPorts base version 1.9.2 downloaded.
--->  MacPorts base is already the latest version

The ports tree has been updated. To upgrade your installed ports, you should run
  port upgrade outdated
Macintosh-2:bin anomaly$ sudo ./port clean --dist curl-ca-bundle
--->  Cleaning curl-ca-bundle
Macintosh-2:bin anomaly$ sudo ./port install curl-ca-bundle
--->  Computing dependencies for curl-ca-bundle
--->  Fetching curl-ca-bundle
--->  Attempting to fetch curl-7.21.2.tar.bz2 from http://curl.sourceforge.net/download/
--->  Attempting to fetch certdata-1.67.txt from http://mxr.mozilla.org/mozilla/source/security/nss/lib/ckfw/builtins/certdata.txt?raw=1&dummy=
--->  Verifying checksum(s) for curl-ca-bundle
Error: Checksum (sha1) mismatch for certdata-1.67.txt
Error: Checksum (rmd160) mismatch for certdata-1.67.txt
Error: Target org.macports.checksum returned: Unable to verify file checksums
Log for curl-ca-bundle is at: /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_release_ports_net_curl-ca-bundle/main.log
Error: Status 1 encountered during processing.
To report a bug, see <http://guide.macports.org/#project.tickets>

The log shows the following:

:info:fetch --->  certdata-1.67.txt doesn't seem to exist in /opt/local/var/macports/
distfiles/curl
:msg:fetch --->  Attempting to fetch certdata-1.67.txt from http://mxr.mozilla.org/mo
zilla/source/security/nss/lib/ckfw/builtins/certdata.txt?raw=1&dummy=
:msg:fetch --->  Verifying checksum(s) for curl-ca-bundle
:debug:checksum checksum phase started at Fri Nov 26 22:10:03 EST 2010
:debug:checksum Executing org.macports.checksum (curl-ca-bundle)
:info:checksum --->  Checksumming curl-7.21.2.tar.bz2
:debug:checksum Correct (sha1) checksum for curl-7.21.2.tar.bz2
:debug:checksum Correct (rmd160) checksum for curl-7.21.2.tar.bz2
:info:checksum --->  Checksumming certdata-1.67.txt
:error:checksum Checksum (sha1) mismatch for certdata-1.67.txt
:info:checksum Portfile checksum: certdata-1.67.txt sha1 4fa826b2f52bf9e5930e810d14e3
c083f89b7190
:info:checksum Distfile checksum: certdata-1.67.txt sha1 4b0fc0f0374183ff6704c5567019
c00c677b503b
:error:checksum Checksum (rmd160) mismatch for certdata-1.67.txt
:info:checksum Portfile checksum: certdata-1.67.txt rmd160 47f43c4b0383ea7f7f726c1e89
564ab19ee2772e
:info:checksum Distfile checksum: certdata-1.67.txt rmd160 569cb70e3cdcbd6cac9714d0f6
30d56cf1402fb1
:info:checksum The correct checksum line may be:
:info:checksum checksums           curl-7.21.2.tar.bz2 \
                    md5     ca96df88e044c7c25d19692ec8b250b2 \
                    sha1    f729552a905033dbd0d2cf56e40c7048f2d8331e \
                    rmd160  fcb1302f79741bc3e488fcee1206284f4cb9e6ca \
                    certdata-1.67.txt \
                    md5     b9fbc45e1420053f94a42c4f8b9541d7 \
                    sha1    4b0fc0f0374183ff6704c5567019c00c677b503b \
                    rmd160  569cb70e3cdcbd6cac9714d0f630d56cf1402fb1
:error:checksum Target org.macports.checksum returned: Unable to verify file checksum
s
:debug:checksum Backtrace: Unable to verify file checksums

[ryandesign (Ryan Carsten Schmidt)]

certdata.txt has been updated upstream. I will need to update the Portfile.

P.S: In the future, please remember to use WikiFormatting and to Cc the port maintainer (that's me in this case).

[ryandesign (Ryan Carsten Schmidt)]

The port has been updated in r73848. Wait an hour, then "sudo port selfupdate" to get the new port definition, then try again to install it.

Thanks for reporting this issue.

[jmroot (Joshua Root)]

You might want to consider uploading a versioned distfile somewhere so this doesn't happen every time the certdata is updated in mozilla's repo. There's always our sourceforge project if you don't have anywhere suitable.

[ryandesign (Ryan Carsten Schmidt)]

A versioned distfile is available on our ​distfiles mirror, but if the ping time to mozilla's server is lower, users will get that. I suppose we could take mozilla's server out entirely. But this issue affects all ports with unversioned distfiles, such as winetricks, dcraw, molden...