#51019: ghostscript @9.19_0+x11 Checksum mismatch during upgrade ----------------------------+---------------------- Reporter: astroboylrx@… | Owner: cal@… Type: defect | Status: assigned Priority: Normal | Milestone: Component: ports | Version: 2.3.4 Resolution: | Keywords: upstream Port: ghostscript | ----------------------------+---------------------- Comment (by macports@…): AFAICT ghostscript-9.19 is being served out of github's archive only (the others that my system tries don't have it), which in turn is coming off S3. And it looks like maybe they rebuilt the archive again since the Portfile/SHA1SUMS were updated. In case it helps this is what I get when I download it manually: {{{ ewen@ashram:~$ sha256sum ghostscript-9.19.tar.gz SHA256(ghostscript-9.19.tar.gz)= cf3c0dce67db1557a87366969945f9c5235887989c0b585e037af366dc035989 ewen@ashram:~$ openssl rmd160 ghostscript-9.19.tar.gz RIPEMD160(ghostscript-9.19.tar.gz)= 26acb114f30cbfa8f0e4912829a4ac38a35f5ea0 ewen@ashram:~$ sha1sum ghostscript-9.19.tar.gz 695c56ecb296e9a0d97bc885c3180b0538aafbf5 ghostscript-9.19.tar.gz ewen@ashram:~$ }}} and also as downloaded by MacPorts: {{{ ewen@ashram:/opt/local/var/macports$ sha256sum ./distfiles/ghostscript/ghostscript-9.19.tar.gz SHA256(./distfiles/ghostscript/ghostscript-9.19.tar.gz)= cf3c0dce67db1557a87366969945f9c5235887989c0b585e037af366dc035989 ewen@ashram:/opt/local/var/macports$ openssl rmd160 ./distfiles/ghostscript/ghostscript-9.19.tar.gz RIPEMD160(./distfiles/ghostscript/ghostscript-9.19.tar.gz)= 26acb114f30cbfa8f0e4912829a4ac38a35f5ea0 ewen@ashram:/opt/local/var/macports$ }}} (one of those via a VPN/web proxy, and thus a different ISP.) Possibly of note, https://github.com/ArtifexSoftware/ghostpdl- downloads/releases still shows 9.19 as "pre-release". 9.18 seems to be the current production release. Possibly the 9.19 archive is being rebuilt repeatedly for updated release candidates? Perhaps we want to go from 9.16 to 9.18 at this point, rather than 9.19? Anyway, definitely good to find out what's actually going on before just accepting the new tarfile though :-) Ewen PS: Mostly for search bait: gimp2, groff, ImageMagick, and netpbm (and probably others) will all want to update ghostscript first before those updates can be installed. -- Ticket URL: <https://trac.macports.org/ticket/51019#comment:7> MacPorts <https://www.macports.org/> Ports system for OS X