py-cython multiple upstream versions of Cython-9.20.tar.gz

[gnw3]

The version of Cython-0.20.tar.gz at cython.org does not agree with the Portfile checksums:

--->  Fetching distfiles for py27-cython
--->  Attempting to fetch Cython-0.20.tar.gz from http://www.cython.org/release/
--->  Verifying checksums for py27-cython
Error: Checksum (rmd160) mismatch for Cython-0.20.tar.gz
Error: Checksum (sha256) mismatch for Cython-0.20.tar.gz
Error: org.macports.checksum for port py27-cython returned: Unable to verify file checksums

The update works using the (larger) version of Cython-0.20.tar.gz from pypi.python.org. Comparing the contents of the two archives reveals that the larger archive (the one that matches the Portfile) contains some extra files:

    $ diff -bw *.list | less
	33a34
    > Cython-0.20/Cython/Compiler/Code.c
    40a42
    > Cython-0.20/Cython/Compiler/FlowControl.c
    45a48
    > Cython-0.20/Cython/Compiler/Lexicon.c
    55a59
    > Cython-0.20/Cython/Compiler/Parsing.c
    59a64
    > Cython-0.20/Cython/Compiler/Scanning.c
    80a86
    > Cython-0.20/Cython/Compiler/Visitor.c
    214a221
    > Cython-0.20/Cython/Plex/Actions.c
    221a229
    > Cython-0.20/Cython/Plex/Scanners.c
    228a237
    > Cython-0.20/Cython/Runtime/refnanny.c
    234a244
    > Cython-0.20/Cython/Tempita/_tempita.c
    (END)

[mf2k (Frank Schima)]

It is not useful to Cc openmaintainer@….

[petrrr]

I confirm this problem. The tarbal published at www.cython.org does not match the checksum in the Portfile. Here the somewhat more explicit output.

--->  Attempting to fetch Cython-0.20.tar.gz from http://www.cython.org/release/
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 1387k  100 1387k    0     0   485k      0  0:00:02  0:00:02 --:--:--  746k
--->  Verifying checksums for py27-cython
--->  Checksumming Cython-0.20.tar.gz
Error: Checksum (rmd160) mismatch for Cython-0.20.tar.gz
Portfile checksum: Cython-0.20.tar.gz rmd160 ad380c04b9145d369480299c4370378b5d37971a
Distfile checksum: Cython-0.20.tar.gz rmd160 bc67c79c9eb817db2a1213bda4ab7fa7e3c5a4b5
Error: Checksum (sha256) mismatch for Cython-0.20.tar.gz
Portfile checksum: Cython-0.20.tar.gz sha256 19bfd04294952214036de863720f2a1198a7446b59b924b8beae6a23d5b54a7b
Distfile checksum: Cython-0.20.tar.gz sha256 5061d11988bd251bea6f29c53148ce4da09f990ef674ee4acabe55c4e13f75a8
The correct checksum line may be:
checksums           rmd160  bc67c79c9eb817db2a1213bda4ab7fa7e3c5a4b5 \
                    sha256  5061d11988bd251bea6f29c53148ce4da09f990ef674ee4acabe55c4e13f75a8

BTW: the version in the summary is probably a typo!

[petrrr]

Cc Me!

[mf2k (Frank Schima)]

This port is no longer maintained. See #43692.

Is this still an issue with version 0.20.1?

[michaelld (Michael Dickens)]

Cython is now at 0.23.2, and this ticket is no longer an issue (I just verified). Closing as fixed sometime between then and now.