Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 540414 - net-libs/gnutls-3.3.10-r2 - Fetched file: gnutls-3.3.10.tar.xz VERIFY FAILED!
Summary: net-libs/gnutls-3.3.10-r2 - Fetched file: gnutls-3.3.10.tar.xz VERIFY FAILED!
Status: RESOLVED WORKSFORME
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Library (show other bugs)
Hardware: AMD64 Linux
: Normal normal
Assignee: Crypto team [DISABLED]
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2015-02-17 20:24 UTC by bschnzl
Modified: 2015-04-10 02:00 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description bschnzl 2015-02-17 20:24:15 UTC 
!!! Fetched file: gnutls-3.3.10.tar.xz VERIFY FAILED!
!!! Reason: Failed on SHA256 verification
!!! Got:      02b1adf96c3d09525ea524509e2ddb853377b96dcae1425a6eef94d4b7ba6457
!!! Expected: e27553981d48d9211a7e5e94f6e78c575205202a181c2345a1c8466ebf1d2219
Refetching... File renamed to '/usr/portage/distfiles/gnutls-3.3.10.tar.xz._checksum_failure_.(many)

Also got the same SHA256 from Linux from Scratch and GNUTLS.org
Comment 1 Jeroen Roovers (RETIRED) gentoo-dev 2015-02-18 05:44:48 UTC 
We need to know where you downloaded that file from.

1) Please post your `emerge --info' output in a comment.
2) Please attach the entire fetch log to this bug report.
Comment 2 bschnzl 2015-02-24 05:29:57 UTC 
Sorry Folks ...

I tried this on about three machines.  I support several operations.  Each has its own http-replicator server.  Most use tds and OUSL for mirrors.

I did download the source files from Linux from Scratch and GNUTLS.org, they got the same erant hash as posted here.

I just pulled a tar ball from one of the other machines, and it matched the other hash.  That would be a workaround!!!
Comment 3 Alon Bar-Lev (RETIRED) gentoo-dev 2015-02-24 11:22:29 UTC 
I downloaded this file[1] from several machines over the world.

and get sha256 e27553981d48d9211a7e5e94f6e78c575205202a181c2345a1c8466ebf1d2219 as expected.

[1] ftp://ftp.gnutls.org/gcrypt/gnutls/v3.3/gnutls-3.3.10.tar.xz