[MacPorts] #51019: ghostscript @9.19_0+x11 Checksum mismatch during upgrade

[MacPorts]

#51019: ghostscript @9.19_0+x11 Checksum mismatch during upgrade
----------------------------+----------------------
  Reporter:  astroboylrx@…  |      Owner:  cal@…
      Type:  defect         |     Status:  assigned
  Priority:  Normal         |  Milestone:
 Component:  ports          |    Version:  2.3.4
Resolution:                 |   Keywords:  upstream
      Port:  ghostscript    |
----------------------------+----------------------

Comment (by macports@…):

 AFAICT ghostscript-9.19 is being served out of github's archive only (the
 others that my system tries don't have it), which in turn is coming off
 S3.  And it looks like maybe they rebuilt the archive again since the
 Portfile/SHA1SUMS were updated.  In case it helps this is what I get when
 I download it manually:

 {{{
 ewen at ashram:~$ sha256sum ghostscript-9.19.tar.gz
 SHA256(ghostscript-9.19.tar.gz)=
 cf3c0dce67db1557a87366969945f9c5235887989c0b585e037af366dc035989
 ewen at ashram:~$ openssl rmd160 ghostscript-9.19.tar.gz
 RIPEMD160(ghostscript-9.19.tar.gz)=
 26acb114f30cbfa8f0e4912829a4ac38a35f5ea0
 ewen at ashram:~$ sha1sum ghostscript-9.19.tar.gz
 695c56ecb296e9a0d97bc885c3180b0538aafbf5  ghostscript-9.19.tar.gz
 ewen at ashram:~$
 }}}

 and also as downloaded by MacPorts:

 {{{
 ewen at ashram:/opt/local/var/macports$ sha256sum
 ./distfiles/ghostscript/ghostscript-9.19.tar.gz
 SHA256(./distfiles/ghostscript/ghostscript-9.19.tar.gz)=
 cf3c0dce67db1557a87366969945f9c5235887989c0b585e037af366dc035989
 ewen at ashram:/opt/local/var/macports$ openssl rmd160
 ./distfiles/ghostscript/ghostscript-9.19.tar.gz
 RIPEMD160(./distfiles/ghostscript/ghostscript-9.19.tar.gz)=
 26acb114f30cbfa8f0e4912829a4ac38a35f5ea0
 ewen at ashram:/opt/local/var/macports$
 }}}

 (one of those via a VPN/web proxy, and thus a different ISP.)

 Possibly of note, https://github.com/ArtifexSoftware/ghostpdl-
 downloads/releases still shows 9.19 as "pre-release".  9.18 seems to be
 the current production release.  Possibly the 9.19 archive is being
 rebuilt repeatedly for updated release candidates?  Perhaps we want to go
 from 9.16 to 9.18 at this point, rather than 9.19?

 Anyway, definitely good to find out what's actually going on before just
 accepting the new tarfile though :-)

 Ewen

 PS: Mostly for search bait: gimp2, groff, ImageMagick, and netpbm (and
 probably others) will all want to update ghostscript first before those
 updates can be installed.

-- 
Ticket URL: <https://trac.macports.org/ticket/51019#comment:7>
MacPorts <https://www.macports.org/>
Ports system for OS X