[MacPorts] #45234: Checksum (sha1) mismatch for bash43-028

[MacPorts]

#45234: Checksum (sha1) mismatch for bash43-028
-----------------------+----------------------
  Reporter:  steven@…  |      Owner:  raimue@…
      Type:  defect    |     Status:  new
  Priority:  Normal    |  Milestone:
 Component:  ports     |    Version:  2.3.1
Resolution:            |   Keywords:
      Port:  bash      |
-----------------------+----------------------

Comment (by raimue@…):

 I've got the same report from the build bots, but I can't reproduce the
 problem locally. According to the GnuPG signature (which I also verified
 before generating the checksum), the one currently in the Portfile is
 correct – or at least, it is really a patch released by Chet Ramey.

 What is the contents of the file with the different checksum? I also tried
 the steps below with the mirror URLs from your `main.log` and I get the
 exact same file from both.

 {{{
 raimue at eunomia ~ $ wget
 http://ftp.gnu.org/gnu/bash/bash-4.3-patches/bash43-028.sig
 [...]
 raimue at eunomia ~ $ wget
 http://ftp.gnu.org/gnu/bash/bash-4.3-patches/bash43-028
 [...]
 raimue at eunomia ~ $ gpg --verify bash43-028.sig
 gpg: Signature made Wed Oct  1 19:23:01 2014 CEST using DSA key ID
 64EA74AB
 gpg: Good signature from "Chet Ramey <chet at cwru.edu>"
 gpg: WARNING: This key is not certified with a trusted signature!
 gpg:          There is no indication that the signature belongs to the
 owner.
 Primary key fingerprint: 7C01 35FB 088A AF6C 66C6  50B9 BB58 69F0 64EA
 74AB
 raimue at eunomia ~ $ sha1sum bash43-028
 1e05d95e4abd32b631d991fa374d030c1651645d  bash43-028
 }}}

-- 
Ticket URL: <https://trac.macports.org/ticket/45234#comment:4>
MacPorts <http://www.macports.org/>
Ports system for OS X