[MacPorts] #68201: OpenBLAS 0.3.24 : Unable to verify file checksums

[MacPorts]

#68201: OpenBLAS 0.3.24 : Unable to verify file checksums
-----------------------------+-------------------------
  Reporter:  FredericVivien  |      Owner:  NicosPavlov
      Type:  defect          |     Status:  assigned
  Priority:  Normal          |  Milestone:
 Component:  ports           |    Version:
Resolution:                  |   Keywords:
      Port:  OpenBLAS        |
-----------------------------+-------------------------
Changes (by jmroot):

 * owner:  (none) => NicosPavlov
 * status:  new => assigned
 * cc: michaelld, catap (added)


Old description:

> Dear all
>
> I have tried to upgrade OpenBLAS to no avail. Here is the list of
> actions:
> - port selfupdate
> - port clean --dist OpenBLAS
> - port upgrade OpenBLAS
> I receive the message:
> --->  Verifying checksums for OpenBLAS
> Error: Checksum (rmd160) mismatch for OpenBLAS-0.3.24.tar.gz
> Error: Checksum (sha256) mismatch for OpenBLAS-0.3.24.tar.gz
> Error: Checksum (size) mismatch for OpenBLAS-0.3.24.tar.gz
> Error: Failed to checksum OpenBLAS: Unable to verify file checksums
>
> The file was fetched from
> https://codeload.github.com/xianyi/OpenBLAS/legacy.tar.gz/v0.3.24?dummy=
> The file is not corrupted as I was able to manually open the tgz file
> without any error. I have not seen any trace of stealth update (all files
> and directory at the root of the archive have the same date of 3 sep
> 22:58).
>
> In the log, the whole part about checksum is:
>
> :info:checksum --->  Checksumming OpenBLAS-0.3.24.tar.gz
> :debug:checksum Calculated (rmd160) is
> 85f2e73faae1137cfbac26d9c5b96246392b0798
> :error:checksum Checksum (rmd160) mismatch for OpenBLAS-0.3.24.tar.gz
> :info:checksum Portfile checksum: OpenBLAS-0.3.24.tar.gz rmd160
> 05443460b8f27b5d432388b01437a7ffcc270367
> :info:checksum Distfile checksum: OpenBLAS-0.3.24.tar.gz rmd160
> 85f2e73faae1137cfbac26d9c5b96246392b0798
> :debug:checksum Calculated (sha256) is
> 7a35ab23cf3d0548876ada8726724eed92cc7982a79f5d1c61ebeb8d4e00f0eb
> :error:checksum Checksum (sha256) mismatch for OpenBLAS-0.3.24.tar.gz
> :info:checksum Portfile checksum: OpenBLAS-0.3.24.tar.gz sha256
> 900fb9c7449b0fe43c6d51088b92817c95df18c4aa01afbe6f5519ab14937bc4
> :info:checksum Distfile checksum: OpenBLAS-0.3.24.tar.gz sha256
> 7a35ab23cf3d0548876ada8726724eed92cc7982a79f5d1c61ebeb8d4e00f0eb
> :debug:checksum Calculated (size) is 24274535
> :error:checksum Checksum (size) mismatch for OpenBLAS-0.3.24.tar.gz
> :info:checksum Portfile checksum: OpenBLAS-0.3.24.tar.gz size 24270690
> :info:checksum Distfile checksum: OpenBLAS-0.3.24.tar.gz size 24274535
> :info:checksum The correct checksum line may be:
> :info:checksum checksums           rmd160
> 85f2e73faae1137cfbac26d9c5b96246392b0798
> :info:checksum                     sha256
> 7a35ab23cf3d0548876ada8726724eed92cc7982a79f5d1c61ebeb8d4e00f0eb
> :info:checksum                     size    24274535
> :error:checksum Failed to checksum OpenBLAS: Unable to verify file
> checksums

New description:

 Dear all

 I have tried to upgrade OpenBLAS to no avail. Here is the list of actions:
 - port selfupdate
 - port clean --dist OpenBLAS
 - port upgrade OpenBLAS
 I receive the message:
 {{{
 --->  Verifying checksums for OpenBLAS
 Error: Checksum (rmd160) mismatch for OpenBLAS-0.3.24.tar.gz
 Error: Checksum (sha256) mismatch for OpenBLAS-0.3.24.tar.gz
 Error: Checksum (size) mismatch for OpenBLAS-0.3.24.tar.gz
 Error: Failed to checksum OpenBLAS: Unable to verify file checksums
 }}}
 The file was fetched from
 https://codeload.github.com/xianyi/OpenBLAS/legacy.tar.gz/v0.3.24?dummy=
 The file is not corrupted as I was able to manually open the tgz file
 without any error. I have not seen any trace of stealth update (all files
 and directory at the root of the archive have the same date of 3 sep
 22:58).

 In the log, the whole part about checksum is:
 {{{
 :info:checksum --->  Checksumming OpenBLAS-0.3.24.tar.gz
 :debug:checksum Calculated (rmd160) is
 85f2e73faae1137cfbac26d9c5b96246392b0798
 :error:checksum Checksum (rmd160) mismatch for OpenBLAS-0.3.24.tar.gz
 :info:checksum Portfile checksum: OpenBLAS-0.3.24.tar.gz rmd160
 05443460b8f27b5d432388b01437a7ffcc270367
 :info:checksum Distfile checksum: OpenBLAS-0.3.24.tar.gz rmd160
 85f2e73faae1137cfbac26d9c5b96246392b0798
 :debug:checksum Calculated (sha256) is
 7a35ab23cf3d0548876ada8726724eed92cc7982a79f5d1c61ebeb8d4e00f0eb
 :error:checksum Checksum (sha256) mismatch for OpenBLAS-0.3.24.tar.gz
 :info:checksum Portfile checksum: OpenBLAS-0.3.24.tar.gz sha256
 900fb9c7449b0fe43c6d51088b92817c95df18c4aa01afbe6f5519ab14937bc4
 :info:checksum Distfile checksum: OpenBLAS-0.3.24.tar.gz sha256
 7a35ab23cf3d0548876ada8726724eed92cc7982a79f5d1c61ebeb8d4e00f0eb
 :debug:checksum Calculated (size) is 24274535
 :error:checksum Checksum (size) mismatch for OpenBLAS-0.3.24.tar.gz
 :info:checksum Portfile checksum: OpenBLAS-0.3.24.tar.gz size 24270690
 :info:checksum Distfile checksum: OpenBLAS-0.3.24.tar.gz size 24274535
 :info:checksum The correct checksum line may be:
 :info:checksum checksums           rmd160
 85f2e73faae1137cfbac26d9c5b96246392b0798
 :info:checksum                     sha256
 7a35ab23cf3d0548876ada8726724eed92cc7982a79f5d1c61ebeb8d4e00f0eb
 :info:checksum                     size    24274535
 :error:checksum Failed to checksum OpenBLAS: Unable to verify file
 checksums
 }}}

--

Comment:

 The repo moved from `xianyi` to `OpenMathLib`, which changes the directory
 name in the legacy tarball. This will have to be handled as a stealth
 update, and at the same time OpenBLAS should be changed to use
 `github.tarball_from releases` and OpenBLAS-devel to use
 `github.tarball_from archive`, so this can't happen again.

-- 
Ticket URL: <https://trac.macports.org/ticket/68201#comment:1>
MacPorts <https://www.macports.org/>
Ports system for macOS