Opened 10 years ago
Closed 8 years ago
#47287 closed defect (fixed)
dumpasn1 checksum mismatch
| Reported by: | macports@… | Owned by: | kurthindenburg (Kurt Hindenburg) |
|---|---|---|---|
| Priority: | Normal | Milestone: | |
| Component: | ports | Version: | 2.3.3 |
| Keywords: | Cc: | Serge3leo (Serguei E. Leontiev) | |
| Port: | dumpasn1 |
Description (last modified by ryandesign (Ryan Carsten Schmidt))
:error:checksum Checksum (sha256) mismatch for dumpasn1.c :info:checksum Portfile checksum: dumpasn1.c sha256 514e3b49adb0b2e49f8bcfc47c20c5f4202bc7e9f7b1e90bcd4d4cf592d469f4 :info:checksum Distfile checksum: dumpasn1.c sha256 d0d77c951a0471c88f14db6d3f6ca32f6492954f4b1c7d2aedbf4fe97905b32c
wget https://www.cs.auckland.ac.nz/~pgut001/dumpasn1.c d0d77c951a0471c88f14db6d3f6ca32f6492954f4b1c7d2aedbf4fe97905b32c dumpasn1.c
upstream seems to have silently 'upgraded'
Attachments (2)
Change History (9)
comment:1 Changed 10 years ago by ryandesign (Ryan Carsten Schmidt)
| Description: | modified (diff) |
|---|---|
| Owner: | changed from macports-tickets@… to cjr@… |
comment:2 Changed 10 years ago by macports@…
https://web.archive.org/web/20120203134243/http://www.cs.auckland.ac.nz/~pgut001/dumpasn1.c has the sha256 hash: 514e3b49adb0b2e49f8bcfc47c20c5f4202bc7e9f7b1e90bcd4d4cf592d469f4 dumpasn1.c which matches the portfile checksum. The diff from this version to today is massive, but the header is clear:
< /* ASN.1 object dumping code, copyright Peter Gutmann ---
/* ASN.1 data display code, copyright Peter Gutmann
10c10 < updated 12 November 2010 (version 20101112, if you prefer it that way). ---
updated 19 December 2014 (version 20141219, if you prefer it that way).
So yes, the source files were clearly 'stealth upgraded' by the upstream author.
comment:3 Changed 9 years ago by Serge3leo (Serguei E. Leontiev)
Don't fetch and don't check.
" Available from http://www.cs.auckland.ac.nz/~pgut001/dumpasn1.c. Last
updated 8 August 2015 (version 20150808, if you prefer it that way). "
Workaround:
$ sudo port edit dumpasn1
Change:
homepage https://www.cs.auckland.ac.nz/~pgut001/ checksums dumpasn1.c \ sha256 6e3942e1f61f309358837c4b69972b80267e3fe881b1c1f064425bbb145a5c74 \ dumpasn1.cfg \ sha256 cae4ec2cca1d22e7ac0e95d87d9e806e1e2629eb226147a050312b450e8daab6
Changed 9 years ago by Serge3leo (Serguei E. Leontiev)
| Attachment: | dumpasn1-main.log added |
|---|
Changed 9 years ago by Serge3leo (Serguei E. Leontiev)
| Attachment: | dumpasn1-151225.patch added |
|---|
comment:5 Changed 9 years ago by macports@…
leo, thanks for adding that patch, I assumed it was the responsibility of the package owner to fix the issue.
comment:6 Changed 8 years ago by kurthindenburg (Kurt Hindenburg)
| Owner: | cjr@… deleted |
|---|---|
| Status: | new → assigned |
comment:7 Changed 8 years ago by kurthindenburg (Kurt Hindenburg)
| Owner: | set to kurthindenburg |
|---|---|
| Resolution: | → fixed |
| Status: | assigned → closed |
The checksum mismatch FAQ entry should be consulted. If this really was a silent upstream update, the stealth update recipe should be followed.