deluge 1.3.0 checksum error

[Ryan Schmidt]

On Sep 30, 2010, at 12:14, David Evans wrote:
> It appears that the deluge-torrent.org prematurely published a copy of 1.3.0 on their site and later retracted
> it, substituting a different file with the same version number.  Unfortunately, the deluge port was
> updated to 1.3.0 while the old file still existed.  

So this is a "stealth update". See the FAQ:

http://trac.macports.org/wiki/FAQ#checksums

> I agree that the new version is probably legitimate but there is difficulty in verifying the checksums as
> you have stated.
> 
> In addition, the earlier version of the file is cached on the macports own mirrors so the port will fetch
> a different version of the file depending on which site it thinks is closer.  In my case, I always get
> it from distfiles.macports.org, which is geographically closer to me than the OSU site. So the checksums
> pass.
> 
> So a question for the more knowledgable is how to purge the old file from the macports mirrors
> and/or under which circumstances it will be automatically updated.

We don't purge files from our mirrors; files stay there forever.

The port must handle the stealth update by using a different dist_subdir. See PortfileRecipes:

http://trac.macports.org/wiki/PortfileRecipes#stealth-updates