Bug 530810

Summary:	dev-libs/matrixssl should set SRC_URI to a versioned tarball
Product:	Gentoo Linux	Reporter:	Mike Gelfand <mikedld>
Component:	[OLD] Library	Assignee:	Embedded Gentoo Team <embedded>
Status:	RESOLVED WONTFIX
Severity:	normal	CC:	jstein
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:	532040
Bug Blocks:

Description Mike Gelfand 2014-11-27 00:41:58 UTC

If one has GENTOO_MIRRORS="" in make.conf, version downloaded is currently 3.6.2 instead of 3.6.1 due to generic SRC_URI. Not only it fails manifest validation, but it would also fail to build because of changes made in Makefiles in 3.6.2 (yeah, who would've guessed that patch release could break things that much, not even talking about one of libraries being named "libcore"). 

Reproducible: Always

Steps to Reproduce:
1. add GENTOO_MIRRORS="" to make.conf
2. remove cached distfile, if any
3. emerge matrixssl
Actual Results:  
Emerge fails.

...
!!! Fetched file: matrixssl-3-6-1-open.tgz VERIFY FAILED!
!!! Reason: Filesize does not match recorded size
!!! Got:      4295435
!!! Expected: 4342141
Refetching... File renamed to '/var/tmp/distfiles/matrixssl-3-6-1-open.tgz._checksum_failure_.1ku3De'

!!! Couldn't download 'matrixssl-3-6-1-open.tgz'. Aborting.
...

Comment 1 Jonas Stein gentoo-dev

2020-09-10 20:08:06 UTC

# Aaron Bauman <bman@gentoo.org> (19 Mar 2016)
# Multiple unpatched security vulnerabilities
# per bug #523040. Masked for removal in 30 days.
dev-libs/matrixssl

Seems bman forgot to close this ticket. Closing now.