Opened 4 years ago

Last modified 4 years ago

#62149 new defect

openconnect-gui @1.3: checksum mismatch

Reported by: jatedev Owned by:
Priority: Normal Milestone:
Component: ports Version: 2.6.3
Keywords: Cc:
Port: openconnect-gui

Description

When running 

sudo port install openconnect-gui

The builds ends with this error: 

--->  Verifying checksums for openconnect-gui
Error: Checksum (rmd160) mismatch for openconnect-gui-1.3.tar.gz
Error: Checksum (sha256) mismatch for openconnect-gui-1.3.tar.gz
Error: Failed to checksum openconnect-gui: Unable to verify file checksums
Error: See /opt/local/var/macports/logs/_opt_local_var_macports_sources_github.com_macports_macports-ports_net_openconnect-gui/openconnect-gui/main.log for details.

The main.log: 

:debug:checksum checksum phase started at Mon Jan 25 17:09:07 EST 2021
:notice:checksum --->  Verifying checksums for openconnect-gui
:debug:checksum Executing org.macports.checksum (openconnect-gui)
:info:checksum --->  Checksumming openconnect-gui-1.3.tar.gz
:debug:checksum Calculated (rmd160) is 5d682dc1c2579cfaaec491e90549d7cda618e738
:error:checksum Checksum (rmd160) mismatch for openconnect-gui-1.3.tar.gz
:info:checksum Portfile checksum: openconnect-gui-1.3.tar.gz rmd160 2ee0a3bf301b
3c9af6bb3b7663875afea6f0a307
:info:checksum Distfile checksum: openconnect-gui-1.3.tar.gz rmd160 5d682dc1c257
9cfaaec491e90549d7cda618e738
:debug:checksum Calculated (sha256) is 87187090ec51fad7efa2c2e3a6ee8bb1ce1962fea4ab53561a7ee9edfaf82866
:error:checksum Checksum (sha256) mismatch for openconnect-gui-1.3.tar.gz
:info:checksum Portfile checksum: openconnect-gui-1.3.tar.gz sha256 7377a5e3de6e5b0764723d66fbd0a1d8b380ddbb5b3862714197a4ba47ee8982
:info:checksum Distfile checksum: openconnect-gui-1.3.tar.gz sha256 87187090ec51fad7efa2c2e3a6ee8bb1ce1962fea4ab53561a7ee9edfaf82866
:info:checksum The correct checksum line may be:
:info:checksum checksums           rmd160  5d682dc1c2579cfaaec491e90549d7cda618e738 \
:info:checksum                     sha256  87187090ec51fad7efa2c2e3a6ee8bb1ce1962fea4ab53561a7ee9edfaf82866 \
:info:checksum                     size    528657

Change History (1)

comment:1 Changed 4 years ago by ryandesign (Ryan Carsten Schmidt)

Summary: openconnect-gui @ 1.3: Build failure due to mismatched checksum → openconnect-gui @1.3: checksum mismatch

The old file—the one with the right checksums which we mirrored in 2015 (see ​http://distfiles.macports.org/openconnect-gui/) is 32MB. The new file available now is 516KB. Comparing the contents of the old and new files, everything is identical except that the included compiled Windows executables and libraries have been replaced with what I assume are ​git large file storage links. For example: 

$ cat openconnect-openconnect-gui-982976f/lib/libgmp.dll.a
version https://git-lfs.github.com/spec/v1
oid sha256:9679b984e50d57cb91e2e216730e54a551f39acad92b44d24875a22321fc600c
size 547020

I guess the developers of openconnect-gui retroactively rewrote their repository history to use git-lfs. Developers should not rewrite the history of their repositories, but here we are.

Presumably Windows binaries are of no consequence to us at MacPorts so we could happily switch to the new source file for the space savings.

This could also be an opportunity to update the port to a newer version. That's #52514.

Note: See TracTickets for help on using tickets.