Opened 2 years ago

Closed 2 years ago

#65567 closed defect (fixed)

py38-locket @1.0.0: bad archive signature for 10.6

Reported by: jmroot (Joshua Root) Owned by: admin@…
Priority: Normal Milestone:
Component: server/hosting Version:
Keywords: Cc: stromnov (Andrey Stromnov), ryandesign (Ryan Carsten Schmidt)
Port: py-locket

Description 

% openssl dgst -ripemd160 -verify /opt/local/share/macports/macports-pubkey.pem -signature ./py38-locket-1.0.0_0.darwin_10.noarch.tbz2.rmd160 ./py38-locket-1.0.0_0.darwin_10.noarch.tbz2
Verification failure
0036751801000000:error:02000068:rsa routines:ossl_rsa_verify:bad signature:crypto/rsa/rsa_sign.c:430:
0036751801000000:error:1C880004:Provider routines:rsa_verify:RSA lib:providers/implementations/signature/rsa_sig.c:774:

Encountered on the buildbot when trying to build dependents, e.g. ​https://build.macports.org/builders/ports-10.6_x86_64-builder/builds/116329/steps/install-dependencies/logs/stdio

I guess the files need to be removed from the server so a fresh build can be done. It might be useful to save the old files somewhere first so they can be compared with the new ones, which might give a clue as to how this happened.

Change History (1)

comment:1 Changed 2 years ago by ryandesign (Ryan Carsten Schmidt)

Resolution: → fixed
Status: new → closed

I'm not sure what happened but it could be the problem you anticipated in comment:ticket:62977:11; I still need to deploy your solution to the server. The ​previous ​builds happened in April so their logs have already been deleted but the ​ports web page shows the two builds did start only ten seconds apart so they could have finished at the same time.

I removed the files from the server and purged them on the CDN. I rebuilt ​py38-locket and ​py38-dask and ​py38-distributed which depend on it. py38-partd which depends on it was already built and py38-sparse which depends on it cannot build because of its dependency py38-llvmlite.

Note: See TracTickets for help on using tickets.