Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 221829 - dev-ruby/activesupport-2.0.2: RMD160 verification failure
Summary: dev-ruby/activesupport-2.0.2: RMD160 verification failure
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All All
: Lowest trivial (vote)
Assignee: Gentoo Ruby Team
URL:
Whiteboard:
Keywords:
: 212232 (view as bug list)
Depends on:
Blocks: 221309
  Show dependency tree
 
Reported: 2008-05-12 13:41 UTC by Migol
Modified: 2008-05-15 09:55 UTC (History)
5 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Migol 2008-05-12 13:41:55 UTC
Verification failed. Tried rm -fr /usr/portage/distfiles/activesupport* && emerge --sync with no result.

emerge --info

Portage 2.1.4.4 (default-linux/x86/2007.0, gcc-4.1.2, glibc-2.6.1-r0, 2.6.24-gentoo-r8 i686)
=================================================================
System uname: 2.6.24-gentoo-r8 i686 Pentium III (Coppermine)
Timestamp of tree: Mon, 12 May 2008 12:46:01 +0000
app-shells/bash:     3.2_p33
dev-java/java-config: 1.3.7, 2.1.6
dev-lang/python:     2.4.4-r9
dev-python/pycrypto: 2.0.1-r6
sys-apps/baselayout: 1.12.11.1
sys-apps/sandbox:    1.2.18.1-r2
sys-devel/autoconf:  2.13, 2.61-r1
sys-devel/automake:  1.8.5-r3, 1.10.1
sys-devel/binutils:  2.18-r1
sys-devel/gcc-config: 1.4.0-r4
sys-devel/libtool:   1.5.26
virtual/os-headers:  2.6.23-r3
ACCEPT_KEYWORDS="x86"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=pentium3 -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc"
CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/terminfo /etc/texmf/web2c /etc/udev/rules.d"
CXXFLAGS="-O2 -march=pentium3 -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="distlocks metadata-transfer sandbox sfperms strict unmerge-orphans userfetch"
GENTOO_MIRRORS="http://gentoo.mirror.pw.edu.pl http://src.gentoo.pl http://gentoo.prz.rzeszow.pl http://distfiles.gentoo.org"
LINGUAS="en pl"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage"
USE="acl aim apache2 aspnet2 avahi bash-completion berkdb bzip2 cli cracklib crypt ctype cups curl dbus dri fastcgi fortran ftp gadu gd gdbm gpm iconv ipv6 isdnlog ithreads java javascript jpeg latex midi mmx mono mssql mudflap mysql mysqli ncurses nls nptl nptlonly openmp pam pcre pdf perl php png postgres pppd python readline reflection ruby server session simplexml slang spell spl sqlite sqlite3 sse ssl subversion suexec tcl tcpd tex4ht threads truetype unicode vhosts vim-syntax x86 xml xorg zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic auth_digest authn_anon authn_dbd authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock dbd deflate dir disk_cache env expires ext_filter file_cache filter headers ident imagemap include info log_config logio mem_cache mime mime_magic negotiation proxy proxy_ajp proxy_balancer proxy_connect proxy_http rewrite setenvif so speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en pl" USERLAND="GNU" VIDEO_CARDS="vesa"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS


result of emerge

Calculating world dependencies... done!
>>> Verifying ebuild Manifests...

>>> Emerging (1 of 6) dev-ruby/activesupport-2.0.2 to /
>>> Downloading 'http://gentoo.mirror.pw.edu.pl/distfiles/activesupport-2.0.2.gem'
--2008-05-12 16:53:43--  http://gentoo.mirror.pw.edu.pl/distfiles/activesupport-2.0.2.gem
Resolving gentoo.mirror.pw.edu.pl... 194.29.128.2
Connecting to gentoo.mirror.pw.edu.pl|194.29.128.2|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 234496 (229K) [application/x-tar]
Saving to: `/usr/portage/distfiles/activesupport-2.0.2.gem'

100%[======================================>] 234,496      168K/s   in 1.4s

2008-05-12 16:53:46 (168 KB/s) - `/usr/portage/distfiles/activesupport-2.0.2.gem' saved [234496/234496]

 * checking ebuild checksums ;-) ...                                      [ ok ]
 * checking auxfile checksums ;-) ...                                     [ ok ]
 * checking miscfile checksums ;-) ...                                    [ ok ]
 * checking activesupport-2.0.2.gem ;-) ...                               [ !! ]

!!! Digest verification failed:
!!! /usr/portage/distfiles/activesupport-2.0.2.gem
!!! Reason: Failed on RMD160 verification
!!! Got: 2b1d7c62364c33ddbafa0ba865978d3ffdaf9d41
!!! Expected: 2b70cf3eb6740121f793c2b9116c74f06c6b08da
Comment 1 Jeroen Roovers (RETIRED) gentoo-dev 2008-05-12 13:50:07 UTC
I can confirm that the upstream file seems to have changed.
Comment 2 Migol 2008-05-12 13:54:03 UTC
(In reply to comment #1)
> I can confirm that the upstream file seems to have changed.
> 

so digest rebuild have to be done by maintainers or the file is damaged
Comment 3 Diego Elio Pettenò (RETIRED) gentoo-dev 2008-05-12 14:15:46 UTC
*** Bug 212232 has been marked as a duplicate of this bug. ***
Comment 4 Hans de Graaff gentoo-dev Security 2008-05-13 05:23:46 UTC
I just did a quick check and it looks like upstream reverted their changes in the gems and now again has the original version on the rubygems mirror system. Either that or the rubygems mirror system is not in sync and providing both versions. Unfortunately I don't have time to look  at this in more detail right now.
Comment 5 Migol 2008-05-13 09:51:06 UTC
I think you're wrong. I've downloaded file from Ruby Forge and it have failed checksum check too. Maybe someone will fix the digest and make it work?
Comment 6 Ferris McCormick (RETIRED) gentoo-dev 2008-05-13 13:04:56 UTC
RMD160 for rails-2.0.2.gem was incorrect in CVS as well.  As part of Bug 221309 I forced a fresh download of it before recomputing digests for rails, and currently CVS matches whatever gets downloaded for rails.  My guess is that everything in dev-ruby for Bug 221309 should be fetched afresh and all digests recomputed.
Comment 7 Hans de Graaff gentoo-dev Security 2008-05-13 17:17:17 UTC
(In reply to comment #5)
> I think you're wrong. I've downloaded file from Ruby Forge and it have failed
> checksum check too. Maybe someone will fix the digest and make it work?
> 

That was my point. Sometime in March the upstream gems got changed and the digest got properly adjusted. It seems that now the upstream gems got changed again, so we'll need to do the same thing, after verifying that the gems are ok.
Comment 8 Hans de Graaff gentoo-dev Security 2008-05-13 18:36:30 UTC
I've just checked all the rails components by downloading the gems directly from rubyforge. I needed to redigest activerecord, activeresource, and activesupport. The digests for the other gems (rails, actionpack, actionmailer) seem to be fine. I've also reinjected the gems into the gentoo mirroring system.

If any of you still see digest issues after 24 hours then please reopen the bug.
Comment 9 Migol 2008-05-15 09:55:34 UTC
Confirming that it now installs without any problems. Thanks for your help.