[MacPorts] #45867: getopt portfile checksums not matched
MacPorts
noreply at macports.org
Wed Nov 12 12:17:03 PST 2014
#45867: getopt portfile checksums not matched
-------------------------+--------------------------------
Reporter: teige-mp@… | Owner: macports-tickets@…
Type: defect | Status: new
Priority: Normal | Milestone:
Component: ports | Version: 2.3.2
Resolution: | Keywords:
Port: getopt |
-------------------------+--------------------------------
Changes (by larryv@…):
* keywords:
getopt checksum getopt-1.1.5.tar.gz
getopt-1.1.5_1.darwin_14.x86_64.tbz2 mismatch
=>
Comment:
Replying to [ticket:45867 teige-mp@…]:
> ''$ sudo port install getopt'' attempts to fetch archive
> '''getopt-1.1.5_1.darwin_14.x86-64.tbz2''', which apparently doesn't
> exist, then defaults to fetching distfiles '''getopt-1.1.5.tar.gz'''
> from frodo.looijaard.name which provides a html webpage instead of the
> tarball. ''(This is the first, less important, problem.)''
Nope, this is the only problem. For some reason, upstream redirects
[http://software.frodo.looijaard.name/getopt/files/getopt-1.1.5.tar.gz the
URL] to [http://frodo.looijaard.name/project/getopt a webpage] instead of
to another distfile. The port’s `master_sites` should be fixed.
> So I tried (separately) downloading the tarball from 2 places:
> -
http://frodo.looijaard.name/system/files/software/getopt/getopt-1.1.5.tar.gz
> - http://distfiles.macports.org/getopt/
> cleaned, moved the file to
> /opt/local/var/macports/distfiles/getopt/getopt-1.1.5.tar.gz and sudo
> port install getopt, again. The checksums still don't match. The
> checksums for both copies I downloaded match each other, but not the
> portfile checksum. Error logs are identical for either file used:
>
> {{{
> :info:checksum Portfile checksum: getopt-1.1.5.tar.gz md5
546acfdb67ba16b8658a45ade9a64d5d
> :info:checksum Distfile checksum: getopt-1.1.5.tar.gz md5
f6405207663f5376f52de35146d52363
>
> :info:checksum Portfile checksum: getopt-1.1.5.tar.gz sha1
9090eb46ac92f2fd2749ca4121e81aaad40f325d
> :info:checksum Distfile checksum: getopt-1.1.5.tar.gz sha1
b90321438fa0952240e25b396c7f1e3f031fafae
>
> :info:checksum Portfile checksum: getopt-1.1.5.tar.gz rmd160
5cdef902ada45ba5e8a66a1357be8189b0cc634f
> :info:checksum Distfile checksum: getopt-1.1.5.tar.gz rmd160
87eb1e0028edf0bc086fe256b1256a8bbf7eeea2
> }}}
The files you mention have the correct checksums.
{{{
% port distfiles getopt | grep rmd160
rmd160: 5cdef902ada45ba5e8a66a1357be8189b0cc634f
% openssl dgst -rmd160 <(curl -Ls
http://frodo.looijaard.name/system/files/software/getopt/getopt-1.1.5.tar.gz)
RIPEMD160(/dev/fd/11)= 5cdef902ada45ba5e8a66a1357be8189b0cc634f
% openssl dgst -rmd160 <(curl -Ls
http://distfiles.macports.org/getopt/getopt-1.1.5.tar.gz)
RIPEMD160(/dev/fd/11)= 5cdef902ada45ba5e8a66a1357be8189b0cc634f
%
}}}
Do those commands produce different output for you?
> Perhaps the portfile checksums want to match this file
> '''getopt-1.1.5_1.darwin_14.x86_64.tbz2'''
They do not.
> which macports attempts to fetch first, and which apparently does not
> exist (neither I nor macports can find it on the internet). However,
> the error log does say "Portfile checksum: '''getopt-1.1.5.tar.gz'''".
> Maybe I'm misunderstanding a difference between archives and
> distfiles, as pertains to fetching? (I'm new to macports)
By default, MacPorts attempts to fetch a pre-built binary archive that is
appropriate for your platform. If it cannot find one, it downloads the
source code and builds. The checksums only pertain to the source code
distribution; binary archives are verified by other means.
> I don't know if, but doubt that, this is a case of stealth updating,
> since the copies I downloaded were last updated on their servers in
> 2012 and 2013 respectively, and were both the same.
The distfiles are the same as ever, but the upstream HTTP redirect is
wrong.
--
Ticket URL: <https://trac.macports.org/ticket/45867#comment:1>
MacPorts <https://www.macports.org/>
Ports system for OS X
More information about the macports-tickets
mailing list