Bug 98467 – MD5 hash of downloaded MetaSploit Framework has been failing for past month+

• Product: Gentoo Linux
• Status: RESOLVED WORKSFORME

[Description Ralph Los 2005-07-09 07:49:41 UTC]

Trying to install MetaSploit Framework 2.4-r1 fails MD5 check, and has been
doing so for over 1+ month.  Here is the error in detail:

03:28:22 (352.25 KB/s) - `/usr/portage/distfiles/framework-2.4.tar.gz' saved
[2,607,730/2,607,730]

>>> md5 files   ;-) metasploit-2.3-r2.ebuild
>>> md5 files   ;-) metasploit-2.4-r1.ebuild
>>> md5 files   ;-) files/msfweb.initd
>>> md5 files   ;-) files/digest-metasploit-2.3-r2
>>> md5 files   ;-) files/msfweb.confd
>>> md5 files   ;-) files/digest-metasploit-2.4-r1

!!! Digest verification Failed:
!!!    /usr/portage/distfiles/framework-2.4.tar.gz
!!! Reason: Failed on MD5 verification

Reproducible: Always
Steps to Reproduce:
1.install MetaSploit Framework (a few months ago)
2.esync
3.emerge -vuDN world
4.FAIL

Actual Results:  
03:28:22 (352.25 KB/s) - `/usr/portage/distfiles/framework-2.4.tar.gz' saved
[2,607,730/2,607,730]

>>> md5 files   ;-) metasploit-2.3-r2.ebuild
>>> md5 files   ;-) metasploit-2.4-r1.ebuild
>>> md5 files   ;-) files/msfweb.initd
>>> md5 files   ;-) files/digest-metasploit-2.3-r2
>>> md5 files   ;-) files/msfweb.confd
>>> md5 files   ;-) files/digest-metasploit-2.4-r1

!!! Digest verification Failed:
!!!    /usr/portage/distfiles/framework-2.4.tar.gz
!!! Reason: Failed on MD5 verification

Expected Results:  
completed build/install.

Portage 2.0.51.22-r1 (default-linux/x86/2005.0, gcc-3.4.4, glibc-2.3.5-r0,
2.6.11-gentoo-r6 i686)
=================================================================
System uname: 2.6.11-gentoo-r6 i686 Pentium II (Deschutes)
Gentoo Base System version 1.6.12
dev-lang/python:     2.3.5, 2.4.1-r1
sys-apps/sandbox:    1.2.10
sys-devel/autoconf:  2.13, 2.59-r7
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.5
sys-devel/binutils:  2.16.1
sys-devel/libtool:   1.5.18-r1
virtual/os-headers:  2.6.11-r2
ACCEPT_KEYWORDS="x86 ~x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O3 -march=i686 -fomit-frame-pointer"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3/share/config
/usr/lib/X11/xkb /usr/share/config /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-O3 -march=i686 -fomit-frame-pointer"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig distlocks sandbox sfperms strict"
GENTOO_MIRRORS="http://gentoo.osuosl.org/ ftp://cs.ubishops.ca/pub/gentoo
ftp://ftp.gtlib.cc.gatech.edu/pub/gentoo"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://rsync.namerica.gentoo.org/gentoo-portage"
USE="x86 X acpi alsa apache2 apm arts avi bash-completion berkdb bitmap-fonts
bzlib crypt cups curl emboss encode ethereal exif foomaticdb fortran gdbm gif
gnome gpm gtk gtk2 imagemagick imlib ipv6 java jpeg kde libg++ libwww mad
maildir mikmod motif mp3 mpeg mysql ncurses nls nmap oggvorbis opengl oss pam
pdflib perl php png python qt quicktime readline sdl spell ssl svga tcpd tiff
truetype truetype-fonts type1-fonts xml2 xmms xv zlib userland_GNU kernel_linux
elibc_glibc"
Unset:  ASFLAGS, CTARGET, LANG, LC_ALL, LDFLAGS, LINGUAS, MAKEOPTS, PORTDIR_OVERLAY

[Comment 1 Marco Morales 2005-07-16 21:30:39 UTC]

its a problem with gentoo mirror, the file is corrupted.... but if you download
the tar from the official site and then copy it to /usr/portage/distfiles you
wont have any problem ;) 

[Comment 2 Aaron Walker (RETIRED) 2005-07-17 07:28:49 UTC]

Remove your old tarball and let it refetch it.  Just tried several different
mirrors and they all worked fine.  Either the tarball on your system was
corrupted somehow or one of the mirrors you're using has a corrupted tarball.

[Comment 3 Aaron Walker (RETIRED) 2005-07-17 10:39:58 UTC]

Marco was able to reproduce it and let me know which mirror, so I was able to
get one of our infra devs at osuosl.org to fix it.