app-cdr/cdrdao-1.1.8's recorded md5sum doesn't match the file from sourceforge.net. # emerge --oneshot cdrdao Calculating dependencies ...done! >>> emerge (1 of 1) app-cdr/cdrdao-1.1.8 to / >>> Downloading http://aleron.dl.sourceforge.net/sourceforge/cdrdao/cdrdao-1.1.8.tar.gz --14:18:54-- http://aleron.dl.sourceforge.net/sourceforge/cdrdao/cdrdao-1.1.8.tar.gz => `/usr/portage/distfiles/cdrdao-1.1.8.tar.gz' Resolving aleron.dl.sourceforge.net... 204.157.3.229 Connecting to aleron.dl.sourceforge.net[204.157.3.229]:80... connected. HTTP request sent, awaiting response... 200 OK Length: 1,535,530 [application/x-gzip] 100%[================================================================================================>] 1,535,530 89.88K/s ETA 00:00 14:19:12 (87.92 KB/s) - `/usr/portage/distfiles/cdrdao-1.1.8.tar.gz' saved [1535530/1535530] !!! File is corrupt or incomplete. (Digests do not match) >>> our recorded digest: 10cfd445fa628fb32dacf02e555fdbba >>> your file's digest: 2f6a1c05c240b36f141bc06c47c50578 !!! File does not exist: /usr/portage/distfiles//cdrdao-1.1.8.tar.gz obsidian portage # ll /usr/portage/distfiles//cdrdao-1.1.8.tar.gz -rw-rw-r-- 1 root portage 1535530 Feb 16 04:24 /usr/portage/distfiles//cdrdao-1.1.8.tar.gz I downloaded cdrdao-1.1.8.tar.gz from http://aleron.dl.sourceforge.net http://unc.dl.sourceforge.net and http://keihanna.dl.sourceforge.net. They all have a md5sum of 2f6a1c05c240b36f141bc06c47c50578 and a length of 1535530.
agree actual digest is 2f6a1c05c240b36f141bc06c47c50578
The sourceforge-mirrors seems to have hick-ups. There are currently two different files out there. I investigate it.
Exact same thing here. Can someone please fix the md5sum in portage so i can update this package?
As I said before, there are currently two different files on the sourceforge-mirrors. If I fix the md5sum for one package, the users who get the other package will claim about a broken md5sum. Maybe we can avoid the problem in pushing the tar-ball on our own distfiles-mirrors.
I wasn't yet able to get this other tarball. Has anyone both? It would be interesting where the source files differ, if they they differ at all. Maybe one is erroneous.
The sources on cesnet and easynet differ. The file on cesnet or easynet is 1499243 in size, the one on the other mirrors is 1535530 in size. I attach a diff on the both files. I updated the md5sum to the "newer" cdrdao-1.8.0.tar.gz and copied it to our distfiles mirrors, so that they will be used instead of the sorceforge-mirrors.
Created attachment 25763 [details, diff] cdrdao-diff
Yes, I would definitely go for the newer one. (Uploading two different tarballs with the same version number is really evil ;-) )
*** Bug 41903 has been marked as a duplicate of this bug. ***
Should be now on the distfiles-mirrors.
