openssl: checksum mismatch

[andrew@…]

Error: org.macports.checksum for port openssl returned: Unable to verify file checksums

$ sudo port test openssl
--->  Computing dependencies for openssl
--->  Verifying checksum(s) for openssl
Error: Checksum (md5) mismatch for openssl-1.0.1c.tar.gz
Error: Checksum (sha1) mismatch for openssl-1.0.1c.tar.gz
Error: Checksum (rmd160) mismatch for openssl-1.0.1c.tar.gz
Error: Checksum (sha256) mismatch for openssl-1.0.1c.tar.gz
Error: org.macports.checksum for port openssl returned: Unable to verify file checksums
Please see the log file for port openssl for details:
    /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_release_tarballs_ports_devel_openssl/openssl/main.log
To report a bug, follow the instructions in the guide:
    http://guide.macports.org/#project.tickets
Error: Processing of port openssl failed

[ryandesign (Ryan Carsten Schmidt)]

What server did the bad file come from?

[andrew@…]

Replying to ryandesign@…:

What server did the bad file come from?

I don't know exactly, I just ran "sudo port install openssl". How can I check the server used to download files?

[mf2k (Frank Schima)]

Please read the FAQ on checksum errors.

[andrew@…]

First my macports tries to download ​http://packages.macports.org/openssl/openssl-1.0.1c_0+universal.darwin_10.i386-x86_64.tbz2
But the file is absent

Then it tries ​http://www.openssl.org/source/openssl-1.0.1c.tar.gz

The www.openssl.org homepage says this file is 4457113 bytes and md5: ae412727c8c15b67880aef7bd2999b2e

But when I download the file its size is 21780480 bytes and md5: 641ed842f13f05d0be5e69f78e142545

I made several times, with no luck

$ sudo port selfupdate
$ sudo port clean --dist openssl
$ sudo port install openssl

Is there any way to change the server to download packages from?

[jmroot (Joshua Root)]

You could edit the portfile and change the master_sites. But you probably want to fix whatever about your network connection is causing incorrect downloads. Downloading from openssl.org gives a file with a checksum matching that in the portfile for me, so it's not a problem with the server.