Opened 12 years ago

Closed 12 years ago

#37637 closed defect (worksforme)

sqlite3 archive is not properly signed

Reported by: f.calboli@… Owned by: macports-tickets@…
Priority: Normal Milestone:
Component: ports Version: 2.1.2
Keywords: Cc: mww@…
Port: sqlite3

Description (last modified by ryandesign (Ryan Carsten Schmidt))

The following installed ports are outdated:
sqlite3                        3.7.15.1_0 < 3.7.15.2_0   
yyyyyy@xxxxxxy:~$ sudo port -u upgrade outdated 
--->  Computing dependencies for sqlite3
--->  Fetching archive for sqlite3
--->  Attempting to fetch sqlite3-3.7.15.2_0.darwin_12.x86_64.tbz2 from http://jog.id.packages.macports.org/macports/packages/sqlite3
--->  Attempting to fetch sqlite3-3.7.15.2_0.darwin_12.x86_64.tbz2.rmd160 from http://jog.id.packages.macports.org/macports/packages/sqlite3
Error: org.macports.archivefetch for port sqlite3 returned: Failed to verify signature for archive!
Please see the log file for port sqlite3 for details:
    /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_release_tarballs_ports_databases_sqlite3/sqlite3/main.log
Error: Unable to upgrade port: 1
To report a bug, follow the instructions in the guide:
    http://guide.macports.org/#project.tickets

Change History (6)

comment:1 Changed 12 years ago by ryandesign (Ryan Carsten Schmidt)

Cc: mww@… added
Description: modified (diff)
Keywords: sqlite3 archive removed
Port: sqlite3 added

I don't know why that would be.

comment:2 Changed 12 years ago by neverpanic (Clemens Lang)

Downloading from the jog.id and mse.uk mirror both give me the same file (and signature). I have also verified the file against the macports pubkey and it comes back correct.

Maybe a bit flipped while you were downloading?

comment:3 in reply to:  2 Changed 12 years ago by f.calboli@…

Replying to cal@…:

Downloading from the jog.id and mse.uk mirror both give me the same file (and signature). I have also verified the file against the macports pubkey and it comes back correct.

Maybe a bit flipped while you were downloading?

from logs I see:

:debug:archivefetch failed verification with key /opt/local/share/macports/macports-pubkey.pem :debug:archivefetch openssl output: Verification Failure child process exited abnormally :error:archivefetch org.macports.archivefetch for port sqlite3 returned: Failed to verify signature for archive! :debug:archivefetch Error code: NONE :debug:archivefetch Backtrace: Failed to verify signature for archive!

while executing

"portarchivefetch::fetchfiles"

(procedure "portarchivefetch::archivefetch_main" line 5) invoked from within

"$procedure $targetname" :info:archivefetch Warning: targets not executed for sqlite3: org.macports.install org.macports.archivefetch org.macports.fetch org.macports.checksum org.macports.extract org.macports.patch org.macports.configure org.macports.build org.macports.destroot :notice:archivefetch Please see the log file for port sqlite3 for details:

/opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_release_tarballs_ports_databases_sqlite3/sqlite3/main.log

do I need to delete /opt/local/share/macports/macports-pubkey.pem?

BW

F

comment:4 Changed 12 years ago by jmroot (Joshua Root)

Without macports-pubkey.pem you won't be able to verify any signatures at all. Are you having signature verification failures with every archive or just sqlite3?

comment:5 in reply to:  4 Changed 12 years ago by f.calboli@…

Replying to jmr@…:

Without macports-pubkey.pem you won't be able to verify any signatures at all. Are you having signature verification failures with every archive or just sqlite3?

only with sqlite3 that I know of, but that's the only port that needed upgrade. The issue seems to be resolved btw, so feel free to clse the ticket

comment:6 Changed 12 years ago by jmroot (Joshua Root)

Resolution: worksforme
Status: newclosed
Note: See TracTickets for help on using tickets.