gstreamer010: checksum mismatch

[m1@…]

os x ei capitan when install wine-devel port :

--->  Fetching distfiles for gstreamer010
--->  Verifying checksums for gstreamer010
--->  Checksumming gstreamer-0.10.36.tar.bz2
Error: Checksum (rmd160) mismatch for gstreamer-0.10.36.tar.bz2
Portfile checksum: gstreamer-0.10.36.tar.bz2 rmd160 5dd01d8ea7afe98e96037bf73f995654f469096e
Distfile checksum: gstreamer-0.10.36.tar.bz2 rmd160 72b166f4380806ba4e37474d5023cb51a2eedb7e
Error: Checksum (sha256) mismatch for gstreamer-0.10.36.tar.bz2
Portfile checksum: gstreamer-0.10.36.tar.bz2 sha256 e556a529e0a8cf1cd0afd0cab2af5488c9524e7c3f409de29b5d82bb41ae7a30
Distfile checksum: gstreamer-0.10.36.tar.bz2 sha256 27a6e1e7ef59faf728f5ca21821a9960529f9c5d55ac57f4689c4d21a859ab63
***
The non-matching file appears to be HTML. See this page for possible reasons
for the checksum mismatch:
<https://trac.macports.org/wiki/MisbehavingServers>
***
The file has been moved to: /opt/local/var/macports/distfiles/gstreamer010/gstreamer-0.10.36.tar.bz2.html
Error: org.macports.checksum for port gstreamer010 returned: Unable to verify file checksums
Warning: targets not executed for gstreamer010: org.macports.activate org.macports.checksum org.macports.extract org.macports.patch org.macports.configure org.macports.build org.macports.destroot org.macports.install
Error: Failed to install gstreamer010
Please see the log file for port gstreamer010 for details:
    /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_release_tarballs_ports_gnome_gstreamer010/gstreamer010/main.log
Error: The following dependencies were not installed: gstreamer010 gstreamer010-gst-plugins-base gnome-vfs gconf dbus-glib dbus gnome-common autoconf-archive gtk-doc docbook-xml docbook-xml-4.1.2 docbook-xml-4.2 xmlcatmgr docbook-xml-4.3 docbook-xml-4.4 docbook-xml-4.5 docbook-xml-5.0 docbook-xsl fop itstool gawk readline py27-libxml2 openjade opensp source-highlight boost icu ctags gtk3 at-spi2-atk at-spi2-core intltool p5.22-getopt-long p5.22-pathtools p5.22-scalar-list-utils p5.22-xml-parser p5.22-libwww-perl p5.22-encode-locale p5.22-file-listing p5.22-http-date p5.22-html-form p5.22-html-parser p5.22-html-tagset p5.22-http-message p5.22-io-html p5.22-lwp-mediatypes p5.22-uri p5.22-mime-base64 p5.22-http-cookies p5.22-http-daemon p5.22-http-negotiate p5.22-lwp-protocol-https p5.22-io-socket-ssl p5.22-io-socket-inet6 p5.22-io p5.22-socket6 p5.22-io-socket-ip p5.22-net-libidn p5.22-net-ssleay p5.22-test-exception p5.22-sub-uplevel p5.22-test-simple p5.22-test-nowarnings p5.22-test-warn p5.22-mozilla-ca p5.22-net-http p5.22-www-robotrules xorg-libXi xorg-libXfixes xorg-fixesproto xorg-libXtst xorg-recordproto xorg-libice xorg-libsm atk gdk-pixbuf2 jasper jpeg shared-mime-info tiff hicolor-icon-theme libepoxy mesa indent xorg-dri2proto xorg-glproto xorg-libXdamage xorg-damageproto xorg-libXmu xorg-libXt python34 python3_select pango Xft2 harfbuzz graphite2 cmake curl libarchive lzo2 xorg-libXcomposite xorg-compositeproto xorg-libXcursor xorg-libXinerama xorg-xineramaproto xorg-libXrandr xorg-randrproto orbit2 libidl policykit mozjs17 autoconf213 nspr gnome-mime-data iso-codes libogg libtheora libvorbis orc coreutils xorg-libXv xorg-videoproto lcms2 libGLU xorg-libXxf86vm xorg-xf86vidmodeproto
To report a bug, follow the instructions in the guide:
    http://guide.macports.org/#project.tickets
Error: Processing of port wine-devel failed

[ryandesign (Ryan Carsten Schmidt)]

Please attach the file /opt/local/var/macports/distfiles/gstreamer010/gstreamer-0.10.36.tar.bz2.html

[m1@…]

Attached!

[m1@…]

The problem is solved. I used DNS 77.88.8.3 and it disturbed work Thanks!

[ryandesign (Ryan Carsten Schmidt)]

Replying to m1@…:

Attached!

Thanks. When I open that file in my web browser, and run its contents through Google Translate, I see that it is a message from Sophos (a security program) that the site mirrors.ustc.edu.cn -- which is one of the sites we have configured in MacPorts as a download location for gnome software -- may pose a threat. This type of non-standards-compliant meddling in network behavior on the part of Sophos is bound to confuse software like MacPorts that relies on the fact that when a file is requested from a network server, either the correct file is delivered, or an error message is produced; Sophos did neither. If you were able to avoid the use of Sophos by changing your DNS server, that'll work great for MacPorts, but of course your computer will no longer have the protection that Sophos claims to offer. In other words if you now visited a web site in your web browser that Sophos thinks is malicious, you would no longer be warned of that by Sophos.

Note that there is very little risk of infection by a compromised server in the context of downloading distfiles with MacPorts. This is because whenever a port maintainer updates a port to a new version, they test it on their own system first, and they record the checksums of the correct distfile into the portfile. If a compromised server were somehow able to deliver a different file to your computer, MacPorts would reject it because it wouldn't match the checksums.

In the case of this particular port, it looks like the file gstreamer-0.10.36.tar.bz2 no longer exists on the gnome mirror network (though it still exists on the MacPorts mirror network). Now, gnome only has the tar.xz format of this version — which is a smaller file, so maybe we should switch the port to use that.