#45234: Checksum (sha1) mismatch for bash43-028 -----------------------+---------------------- Reporter: steven@… | Owner: raimue@… Type: defect | Status: new Priority: Normal | Milestone: Component: ports | Version: 2.3.1 Resolution: | Keywords: Port: bash | -----------------------+---------------------- Comment (by raimue@…): I've got the same report from the build bots, but I can't reproduce the problem locally. According to the GnuPG signature (which I also verified before generating the checksum), the one currently in the Portfile is correct – or at least, it is really a patch released by Chet Ramey. What is the contents of the file with the different checksum? I also tried the steps below with the mirror URLs from your `main.log` and I get the exact same file from both. {{{ raimue@eunomia ~ $ wget http://ftp.gnu.org/gnu/bash/bash-4.3-patches/bash43-028.sig [...] raimue@eunomia ~ $ wget http://ftp.gnu.org/gnu/bash/bash-4.3-patches/bash43-028 [...] raimue@eunomia ~ $ gpg --verify bash43-028.sig gpg: Signature made Wed Oct 1 19:23:01 2014 CEST using DSA key ID 64EA74AB gpg: Good signature from "Chet Ramey <chet@cwru.edu>" gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: 7C01 35FB 088A AF6C 66C6 50B9 BB58 69F0 64EA 74AB raimue@eunomia ~ $ sha1sum bash43-028 1e05d95e4abd32b631d991fa374d030c1651645d bash43-028 }}} -- Ticket URL: <https://trac.macports.org/ticket/45234#comment:4> MacPorts <http://www.macports.org/> Ports system for OS X