[MacPorts] #29392: metasploit3: checksum mismatch (was: MD5 and SHA1 Mismatch for metasploit3)

MacPorts noreply at macports.org
Sat May 7 17:02:00 PDT 2011


#29392: metasploit3: checksum mismatch
---------------------------------+------------------------------------------
 Reporter:  rhizome23@…          |       Owner:  opendarwin.org@…          
     Type:  defect               |      Status:  new                       
 Priority:  Normal               |   Milestone:                            
Component:  ports                |     Version:  1.9.2                     
 Keywords:                       |        Port:  metasploit3               
---------------------------------+------------------------------------------
Changes (by ryandesign@…):

 * cc: ryandesign@… (added)
  * priority:  Low => Normal
  * owner:  macports-tickets@… => opendarwin.org@…
  * keywords:  metasploit3 hashmismatch =>


Old description:

> I suspect the hash values just need updating.
>
> "--->  Fetching metasploit3
> --->  Attempting to fetch framework-3.0.tar.gz from
> http://framework.metasploit.com/releases/
> --->  Verifying checksum(s) for metasploit3
> Error: Checksum (md5) mismatch for framework-3.0.tar.gz
> Error: Checksum (sha1) mismatch for framework-3.0.tar.gz
> ***
> The non-matching file appears to be HTML. See this page for possible
> reasons
> for the checksum mismatch:
> <http://trac.macports.org/wiki/MisbehavingServers>
> ***
> Error: Target org.macports.checksum returned: Unable to verify file
> checksums
> Log for metasploit3 is at:
> /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_release_ports_security_metasploit3/main.log
> Error: Status 1 encountered during processing.
> "

New description:

 I suspect the hash values just need updating.

 {{{
 --->  Fetching metasploit3
 --->  Attempting to fetch framework-3.0.tar.gz from
 http://framework.metasploit.com/releases/
 --->  Verifying checksum(s) for metasploit3
 Error: Checksum (md5) mismatch for framework-3.0.tar.gz
 Error: Checksum (sha1) mismatch for framework-3.0.tar.gz
 ***
 The non-matching file appears to be HTML. See this page for possible
 reasons
 for the checksum mismatch:
 <http://trac.macports.org/wiki/MisbehavingServers>
 ***
 Error: Target org.macports.checksum returned: Unable to verify file
 checksums
 Log for metasploit3 is at:
 /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_release_ports_security_metasploit3/main.log
 Error: Status 1 encountered during processing.
 }}}

--

Comment:

 Replying to [ticket:29392 rhizome23@…]:
 > I suspect the hash values just need updating.

 Unlikely. See where it says "The non-matching file appears to be HTML. See
 this page for possible reasons for the checksum mismatch:
 MisbehavingServers". Did you read that page? In this case, it is actually
 metasploit's own web server that is misconfigured, and delivers a "200 OK"
 response even for documents which should be reported as "404 Not Found".

 See also #24103. The port is years out of date.

-- 
Ticket URL: <https://trac.macports.org/ticket/29392#comment:1>
MacPorts <http://www.macports.org/>
Ports system for Mac OS


More information about the macports-tickets mailing list