[MacPorts] #50835: qt4-mac Failed to verify signature for archive!

[MacPorts]

#50835: qt4-mac Failed to verify signature for archive!
-----------------------------------+-------------------------
  Reporter:  jorgeantoniorivera@…  |      Owner:  michaelld@…
      Type:  defect                |     Status:  new
  Priority:  Normal                |  Milestone:
 Component:  ports                 |    Version:  2.3.4
Resolution:                        |   Keywords:
      Port:  qt4-mac               |
-----------------------------------+-------------------------
Description changed by mf2k@…:

Old description:

> I trying to install it, I get a suspicious error.
>
> The rmd160 signature in the Portfile is different than the downloaded
> file.
>
> Is a security problem?
>
> What is the correct signature for this file?
>
> Best regards.
>

> Port install log:
> -------------
> --->  Attempting to fetch qt4-mac-4.8.7_4.darwin_12.x86_64.tbz2.rmd160
> from http://packages.macports.org/qt4-mac
> Warning: Failed to verify signature for archive!
> Error: org.macports.archivefetch for port qt4-mac returned: archivefetch
> failed for qt4-mac @4.8.7_4
> Please see the log file for port qt4-mac for details:
> /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_release_tarballs_ports_aqua_qt4-mac/qt4-mac/main.log
> Error: Unable to upgrade port: 1
> Error: Unable to execute port: upgrade qt4-mac failed
> ------------------
>
> My check dsgt:
> -------------
> RIPEMD160(/tmp/qt4-mac-4.8.7_4.darwin_12.x86_64.tbz2)=
> 1d4a5db59629f516de6d5cec4e6ae72ddc8d0d25
>

> Portfile contents:
> --------------
> checksums           rmd160 afb5e5a99388e6429faca59cb5000054feffd166 \
>                     sha256
> e2882295097e47fe089f8ac741a95fef47e0a73a3f3cdf21b56990638f626ea0

New description:

 I trying to install it, I get a suspicious error.

 The rmd160 signature in the Portfile is different than the downloaded
 file.

 Is a security problem?

 What is the correct signature for this file?

 Best regards.


 Port install log:
 -------------
 {{{
 --->  Attempting to fetch qt4-mac-4.8.7_4.darwin_12.x86_64.tbz2.rmd160
 from http://packages.macports.org/qt4-mac
 Warning: Failed to verify signature for archive!
 Error: org.macports.archivefetch for port qt4-mac returned: archivefetch
 failed for qt4-mac @4.8.7_4
 Please see the log file for port qt4-mac for details:
 /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_release_tarballs_ports_aqua_qt4-mac/qt4-mac/main.log
 Error: Unable to upgrade port: 1
 Error: Unable to execute port: upgrade qt4-mac failed
 }}}
 ------------------

 My check dsgt:
 -------------
 {{{
 RIPEMD160(/tmp/qt4-mac-4.8.7_4.darwin_12.x86_64.tbz2)=
 1d4a5db59629f516de6d5cec4e6ae72ddc8d0d25
 }}}

 Portfile contents:
 --------------
 {{{
 checksums           rmd160 afb5e5a99388e6429faca59cb5000054feffd166 \
                     sha256
 e2882295097e47fe089f8ac741a95fef47e0a73a3f3cdf21b56990638f626ea0
 }}}

--

-- 
Ticket URL: <https://trac.macports.org/ticket/50835#comment:2>
MacPorts <https://www.macports.org/>
Ports system for OS X