[MacPorts] #56704: archivefetch failed verification with key /opt/local/share/macports/macports-pubkey.pem

Wed Jun 20 18:08:29 UTC 2018

#56704: archivefetch failed verification with key /opt/local/share/macports
/macports-pubkey.pem
------------------------+--------------------
  Reporter:  psiqueira  |      Owner:  (none)
      Type:  defect     |     Status:  new
  Priority:  Normal     |  Milestone:
 Component:  base       |    Version:  2.5.2
Resolution:             |   Keywords:
      Port:             |
------------------------+--------------------
Changes (by jmroot):

 * keywords:  verification failure =>
 * port:  wget and others =>

Old description:

> Since running selfupdate (2.5.2) and upgrading outdated a few months ago,
> I have been having a problem with my macport installation for the past
> several months.
>
> What it amounts to is that it seems to be related to the public-key
> verification step when downloading and/or updating software.  This
> happens whether I am installing wget, or any other software.
>
> To fix the problem, I have gone so far as to re-install XQuartz and
> macports, but still to no avail.  Hence, I am really stuck.
>
> Below is the output from the log file that is associated with my most
> recent attempt at installing wget.
>
> Any help or suggestions that you can give to get me over this hump that
> is crippling my system would be very much appreciated!
>
> --- main.log ---
>
> :debug:sysinfo macOS 10.13 (darwin/17.6.0) arch i386
> :debug:sysinfo MacPorts 2.5.2
> :debug:sysinfo Xcode 9.4.1
> :debug:sysinfo SDK 10.13
> :debug:sysinfo MACOSX_DEPLOYMENT_TARGET: 10.13
> :debug:main dropping privileges: euid changed to 502, egid changed to
> 501.
> :debug:main Executing org.macports.main (libiconv)
> :debug:main Privilege de-escalation not attempted as not running as root.
> :debug:archivefetch archivefetch phase started at Wed Jun 20 10:33:44 EDT
> 2018
> :msg:archivefetch --->  Fetching archive for libiconv
> :debug:archivefetch Executing org.macports.archivefetch (libiconv)
> :debug:archivefetch euid/egid changed to: 0/0
> :debug:archivefetch chowned /opt/local/var/macports/incoming to macports
> :debug:archivefetch euid/egid changed to: 502/501
> :info:archivefetch --->  libiconv-1.15_0.darwin_17.x86_64.tbz2 doesn't
> seem to exist in /opt/local/var/macports/incoming/verified
> :msg:archivefetch --->  Attempting to fetch
> libiconv-1.15_0.darwin_17.x86_64.tbz2 from
> http://jog.id.packages.macports.org/macports/packages/libiconv
> :msg:archivefetch --->  Attempting to fetch
> libiconv-1.15_0.darwin_17.x86_64.tbz2.rmd160 from
> http://jog.id.packages.macports.org/macports/packages/libiconv
> :debug:archivefetch failed verification with key
> /opt/local/share/macports/macports-pubkey.pem
> :debug:archivefetch openssl output: Verification Failure
> :debug:archivefetch child process exited abnormally
> :warn:archivefetch Failed to verify signature for archive!
> :error:archivefetch Failed to archivefetch libiconv: version @1.15_0
> :debug:archivefetch Error code: NONE
> :debug:archivefetch Backtrace: version @1.15_0
> :debug:archivefetch     while executing
> :debug:archivefetch "error "version @[option version]_[option
> revision][option portvariants]""
> :debug:archivefetch     (procedure "portarchivefetch::fetchfiles" line
> 144)
> :debug:archivefetch     invoked from within
> :debug:archivefetch "portarchivefetch::fetchfiles"
> :debug:archivefetch     (procedure "portarchivefetch::archivefetch_main"
> line 5)
> :debug:archivefetch     invoked from within
> :debug:archivefetch "$procedure $targetname"
> :error:archivefetch See
> /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_textproc_libiconv/libiconv/main.log
> for details.

New description:

 Since running selfupdate (2.5.2) and upgrading outdated a few months ago,
 I have been having a problem with my macport installation for the past
 several months.

 What it amounts to is that it seems to be related to the public-key
 verification step when downloading and/or updating software.  This happens
 whether I am installing wget, or any other software.

 To fix the problem, I have gone so far as to re-install XQuartz and
 macports, but still to no avail.  Hence, I am really stuck.

 Below is the output from the log file that is associated with my most
 recent attempt at installing wget.

 Any help or suggestions that you can give to get me over this hump that is
 crippling my system would be very much appreciated!

 --- main.log ---
 {{{
 :debug:sysinfo macOS 10.13 (darwin/17.6.0) arch i386
 :debug:sysinfo MacPorts 2.5.2
 :debug:sysinfo Xcode 9.4.1
 :debug:sysinfo SDK 10.13
 :debug:sysinfo MACOSX_DEPLOYMENT_TARGET: 10.13
 :debug:main dropping privileges: euid changed to 502, egid changed to 501.
 :debug:main Executing org.macports.main (libiconv)
 :debug:main Privilege de-escalation not attempted as not running as root.
 :debug:archivefetch archivefetch phase started at Wed Jun 20 10:33:44 EDT
 2018
 :msg:archivefetch --->  Fetching archive for libiconv
 :debug:archivefetch Executing org.macports.archivefetch (libiconv)
 :debug:archivefetch euid/egid changed to: 0/0
 :debug:archivefetch chowned /opt/local/var/macports/incoming to macports
 :debug:archivefetch euid/egid changed to: 502/501
 :info:archivefetch --->  libiconv-1.15_0.darwin_17.x86_64.tbz2 doesn't
 seem to exist in /opt/local/var/macports/incoming/verified
 :msg:archivefetch --->  Attempting to fetch
 libiconv-1.15_0.darwin_17.x86_64.tbz2 from
 http://jog.id.packages.macports.org/macports/packages/libiconv
 :msg:archivefetch --->  Attempting to fetch
 libiconv-1.15_0.darwin_17.x86_64.tbz2.rmd160 from
 http://jog.id.packages.macports.org/macports/packages/libiconv
 :debug:archivefetch failed verification with key /opt/local/share/macports
 /macports-pubkey.pem
 :debug:archivefetch openssl output: Verification Failure
 :debug:archivefetch child process exited abnormally
 :warn:archivefetch Failed to verify signature for archive!
 :error:archivefetch Failed to archivefetch libiconv: version @1.15_0
 :debug:archivefetch Error code: NONE
 :debug:archivefetch Backtrace: version @1.15_0
 :debug:archivefetch     while executing
 :debug:archivefetch "error "version @[option version]_[option
 revision][option portvariants]""
 :debug:archivefetch     (procedure "portarchivefetch::fetchfiles" line
 144)
 :debug:archivefetch     invoked from within
 :debug:archivefetch "portarchivefetch::fetchfiles"
 :debug:archivefetch     (procedure "portarchivefetch::archivefetch_main"
 line 5)
 :debug:archivefetch     invoked from within
 :debug:archivefetch "$procedure $targetname"
 :error:archivefetch See
 /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_textproc_libiconv/libiconv/main.log
 for details.
 }}}

--

Comment:

 Downloading the archive and signature from the same server you're getting
 them from and verifying manually with openssl works fine here:
 {{{
 % openssl dgst -ripemd160 -verify /opt/local/share/macports/macports-
 pubkey.pem -signature libiconv-1.15_0.darwin_17.x86_64.tbz2.rmd160
 libiconv-1.15_0.darwin_17.x86_64.tbz2
 Verified OK
 }}}
 The archive, the signature or both must be getting corrupted in transit
 somehow. See wiki:MisbehavingServers for some ways that might be
 happening. Good luck, network issues like this can be tricky.

-- 
Ticket URL: <https://trac.macports.org/ticket/56704#comment:1>
MacPorts <https://www.macports.org/>
Ports system for macOS