Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 487776 - dev-libs/libtar-1.2.20 SHA256 verification failed
Summary: dev-libs/libtar-1.2.20 SHA256 verification failed
Status: RESOLVED TEST-REQUEST
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Library (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: No maintainer - Look at https://wiki.gentoo.org/wiki/Project:Proxy_Maintainers if you want to take care of it
URL:
Whiteboard:
Keywords:
: 487884 (view as bug list)
Depends on:
Blocks:
 
Reported: 2013-10-12 12:39 UTC by Helmut Jarausch
Modified: 2013-10-14 10:46 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Helmut Jarausch 2013-10-12 12:39:29 UTC
2013-10-12 12:24:54 (312 KB/s) - '/usr/portage/distfiles/libtar-1.2.20.tar.gz' saved [63542]

!!! Fetched file: libtar-1.2.20.tar.gz VERIFY FAILED!
!!! Reason: Failed on SHA256 verification
!!! Got:      d8790291ed5acfeaaaf2ce3fa9fea024c1b553bbd1ceed5b5d6eb0b4cf6ccb7e
!!! Expected: a6ad158585c0274496421dfa18f77e61de4889dd531ad9421f5eb639f79b983a
Comment 1 Jeroen Roovers (RETIRED) gentoo-dev 2013-10-12 13:13:41 UTC
ebuild libtar-1.2.20.ebuild fetch
Appending /newaches/gentoo/cvs/gentoo-x86 to PORTDIR_OVERLAY...
>>> Downloading 'http://repo.or.cz/w/libtar.git/snapshot/v1.2.20.tar.gz'
--2013-10-12 15:13:14--  http://repo.or.cz/w/libtar.git/snapshot/v1.2.20.tar.gz
Resolving repo.or.cz (repo.or.cz)... 195.113.20.142
Connecting to repo.or.cz (repo.or.cz)|195.113.20.142|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [application/x-gzip]
Saving to: ‘/world/distfiles/libtar-1.2.20.tar.gz’
    [ <=>                                                                                       ] 63,542      --.-K/s   in 0.08s   
2013-10-12 15:13:15 (758 KB/s) - ‘/world/distfiles/libtar-1.2.20.tar.gz’ saved [63542]
!!! Fetched file: libtar-1.2.20.tar.gz VERIFY FAILED!
!!! Reason: Failed on SHA256 verification
!!! Got:      e1c14394f92680979fd5326ccc940b5b2a55fc6c90c915f2192c13273f542ab7
!!! Expected: a6ad158585c0274496421dfa18f77e61de4889dd531ad9421f5eb639f79b983a
Refetching... File renamed to '/world/distfiles/libtar-1.2.20.tar.gz._checksum_failure_.3ntmd1'
!!! Couldn't download 'libtar-1.2.20.tar.gz'. Aborting.
Comment 2 Agostino Sarubbo gentoo-dev 2013-10-12 17:48:14 UTC
fixed.
Comment 3 Agostino Sarubbo gentoo-dev 2013-10-13 08:08:47 UTC
Well, it seems not fixed.

I tried: rm Manifest && repoman manifest && repoman commit -m "$message"

but it seems to not appear in the cvs. Now I'm trying to add a revision.
Comment 4 Agostino Sarubbo gentoo-dev 2013-10-13 09:25:37 UTC
(In reply to Agostino Sarubbo from comment #3)
> Well, it seems not fixed.
> 
> I tried: rm Manifest && repoman manifest && repoman commit -m "$message"
> 
> but it seems to not appear in the cvs. Now I'm trying to add a revision.

@pinkbyte, it still fails, could you check it?
Comment 5 Agostino Sarubbo gentoo-dev 2013-10-13 12:39:33 UTC
*** Bug 487884 has been marked as a duplicate of this bug. ***
Comment 6 C. Wijtmans 2013-10-13 22:24:13 UTC
this has been bothering me for a few days now. My guess is checksum in portage is wrong.
Comment 7 Jouni Kosonen 2013-10-14 05:11:10 UTC
(In reply to C.J. Wijtmans from comment #6)
> this has been bothering me for a few days now. My guess is checksum in
> portage is wrong.

The checksum from upstream is not constant, because the tarball is regenerated on request and contains a timestamp.
Comment 8 Boris Vingradov 2013-10-14 07:28:54 UTC
This bug is reply to me:

2013-10-14 14:26:53 (144 KB/s) - ‘/usr/portage/distfiles/libtar-1.2.20.tar.gz’ saved [63542]

!!! Fetched file: libtar-1.2.20.tar.gz VERIFY FAILED!
!!! Reason: Failed on SHA256 verification
!!! Got:      20bc2b46a75c1b08c14f6995ec4143dd3b98f233639033cc702663c473e847d2
!!! Expected: ae5aa2092fdeb1124b83be498bac73e1a82dec52ef8374cc0815140d8e1b87bf
Refetching... File renamed to '/usr/portage/distfiles/libtar-1.2.20.tar.gz._checksum_failure_.e5Wipj'
Comment 9 Sergey Popov gentoo-dev 2013-10-14 10:46:13 UTC
Oops, my mistake.

  14 Oct 2013; Sergey Popov <pinkbyte@gentoo.org> -libtar-1.2.20.ebuild,
  -libtar-1.2.20-r1.ebuild, +libtar-1.2.20-r2.ebuild:
  Revision bump: put tarball with recent version on devspace, cause upstream
  URL contains dynamically regenerated file, which did not have constant
  checksum, bug #487776. Drop old revisions

  14 Oct 2013; Sergey Popov <pinkbyte@gentoo.org> libtar-1.2.20-r2.ebuild:
  Restore amd64 stable keyword

I have to do some tricks here, with Infra's help(thanks to tampakrap). Please, wait for at least 4 hours(our mirrors sync period), sync and try again, thanks.