py-ipython 1.0.0: Unable to verify file checksums

[ned-deily (Ned Deily)]

Stealth update perhaps?

:info:checksum --->  Checksumming ipython-1.0.0.tar.gz
:error:checksum Checksum (rmd160) mismatch for ipython-1.0.0.tar.gz
:info:checksum Portfile checksum: ipython-1.0.0.tar.gz rmd160 eb4a1e4e21296674083dbe4a60ce5fee12008d36
:info:checksum Distfile checksum: ipython-1.0.0.tar.gz rmd160 6dfd209010548ec3d65e5ce607ca11713a1eba4a
:error:checksum Checksum (sha256) mismatch for ipython-1.0.0.tar.gz
:info:checksum Portfile checksum: ipython-1.0.0.tar.gz sha256 0d07521b4784e1b1f676b4b32c1f708a026cf398a0e6c3f095fce41f1402911c
:info:checksum Distfile checksum: ipython-1.0.0.tar.gz sha256 ce0b57c61f9909f9475d44c913524fbb2e945053877c2f0c0bb18f06e63f7972
:info:checksum The correct checksum line may be:
:info:checksum checksums           rmd160  6dfd209010548ec3d65e5ce607ca11713a1eba4a \
                    sha256  ce0b57c61f9909f9475d44c913524fbb2e945053877c2f0c0bb18f06e63f7972
:error:checksum org.macports.checksum for port py27-ipython returned: Unable to verify file checksums

[stromnov (Andrey Stromnov)]

No, this is not a proper stealth update. Probably some files at github CDN currently out-of-sync. Or you have damaged copy of source dist.

Please, try this:

wget 'https://github.com/ipython/ipython/releases/download/rel-1.0.0/ipython-1.0.0.tar.gz' && (openssl dgst -ripemd160 ipython-1.0.0.tar.gz; openssl dgst -sha256 ipython-1.0.0.tar.gz)

My output is:

   ... skipped ...
2013-08-12 09:43:28 (1.15 MB/s) - ‘ipython-1.0.0.tar.gz’ saved [8658118/8658118]

RIPEMD160(ipython-1.0.0.tar.gz)= eb4a1e4e21296674083dbe4a60ce5fee12008d36
SHA256(ipython-1.0.0.tar.gz)= 0d07521b4784e1b1f676b4b32c1f708a026cf398a0e6c3f095fce41f1402911c

[ned-deily (Ned Deily)]

For me, port is downloading from ipython.org and the file downloaded from there differs from that downloaded from github.com.

# port upgrade py27-ipython
--->  Computing dependencies for py27-ipython
--->  Fetching distfiles for py27-ipython
--->  Attempting to fetch ipython-1.0.0.tar.gz from http://distfiles.macports.org/py-ipython
--->  Attempting to fetch ipython-1.0.0.tar.gz from http://sea.us.distfiles.macports.org/macports/distfiles/py-ipython
--->  Attempting to fetch ipython-1.0.0.tar.gz from http://archive.ipython.org/release/1.0.0
--->  Verifying checksums for py27-ipython
Error: Checksum (rmd160) mismatch for ipython-1.0.0.tar.gz
Error: Checksum (sha256) mismatch for ipython-1.0.0.tar.gz
Error: org.macports.checksum for port py27-ipython returned: Unable to verify file checksums
# wget http://archive.ipython.org/release/1.0.0/ipython-1.0.0.tar.gz
--2013-08-12 01:04:34--  http://archive.ipython.org/release/1.0.0/ipython-1.0.0.tar.gz
Resolving archive.ipython.org (archive.ipython.org)... 67.205.51.145
Connecting to archive.ipython.org (archive.ipython.org)|67.205.51.145|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 8657966 (8.3M) [application/x-tar]
Saving to: ‘ipython-1.0.0.tar.gz’
# openssl dgst -sha256 ipython-1.0.0.tar.gz
SHA256(ipython-1.0.0.tar.gz)= ce0b57c61f9909f9475d44c913524fbb2e945053877c2f0c0bb18f06e63f7972
# wget --no-check-certificate  'https://github.com/ipython/ipython/releases/download/rel-1.0.0/ipython-1.0.0.tar.gz'
--2013-08-12 01:02:09--  https://github.com/ipython/ipython/releases/download/rel-1.0.0/ipython-1.0.0.tar.gz
Resolving github.com (github.com)... 204.232.175.90
Connecting to github.com (github.com)|204.232.175.90|:443... connected.
WARNING: The certificate of ‘github.com’ is not trusted.
WARNING: The certificate of ‘github.com’ hasn't got a known issuer.
HTTP request sent, awaiting response... 302 Found
Location: http://s3.amazonaws.com/github-cloud/releases/658518/7178003c-0090-11e3-8ace-0568920a9569.gz?response-content-disposition=attachment%3B%20filename%3Dipython-1.0.0.tar.gz&AWSAccessKeyId=AKIAISTNZFOVBIJMK3TQ&Expires=1376294590&Signature=zkGUmqxjBfT%2Bf3objrZ1Ub%2FhlpA%3D [following]
--2013-08-12 01:02:10--  http://s3.amazonaws.com/github-cloud/releases/658518/7178003c-0090-11e3-8ace-0568920a9569.gz?response-content-disposition=attachment%3B%20filename%3Dipython-1.0.0.tar.gz&AWSAccessKeyId=AKIAISTNZFOVBIJMK3TQ&Expires=1376294590&Signature=zkGUmqxjBfT%2Bf3objrZ1Ub%2FhlpA%3D
Resolving s3.amazonaws.com (s3.amazonaws.com)... 207.171.185.200
Connecting to s3.amazonaws.com (s3.amazonaws.com)|207.171.185.200|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 8658118 (8.3M) [application/octet-stream]
Saving to: ‘ipython-1.0.0.tar.gz’
# openssl dgst -sha256 ipython-1.0.0.tar.gz
SHA256(ipython-1.0.0.tar.gz)= 0d07521b4784e1b1f676b4b32c1f708a026cf398a0e6c3f095fce41f1402911c

[ned-deily (Ned Deily)]

FWIW, although the two tar.gz files differ and the gunzip-ed tar files have different time stamps, they seem to expand to the same set of files.

[mndavidoff (Monte Davidoff)]

Cc Me!

[ned-deily (Ned Deily)]

r109286 does fix the problem for me. Thanks!

[stromnov (Andrey Stromnov)]

Committed at r109286.