#35017: cdf @3.4.1 checksum error - possible stealth upgrade? --------------------------+------------------------------------------------- Reporter: p.bro@… | Owner: macports-tickets@… Type: defect | Status: new Priority: Normal | Milestone: Component: ports | Version: 2.1.1 Keywords: checksum | Port: cdf --------------------------+------------------------------------------------- Port upgrade/install fails for cdf with a checksum error. I did not succeed in obtaining an earlier version of the package to compare, so I cannot say whether this is a stealth upgrade or not. After port selfupdate and port clean cdf the install still fails with a checksum error. {{{ sudo port -v install cdf ---> Computing dependencies for cdf. ---> Fetching archive for cdf ---> cdf-3.4.1_0+gcc45.darwin_11.x86_64.tbz2 doesn't seem to exist in /opt/local/var/macports/incoming/verified ---> Attempting to fetch cdf-3.4.1_0+gcc45.darwin_11.x86_64.tbz2 from http://packages.macports.org/cdf % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 ---> Fetching distfiles for cdf ---> cdf34_1-dist-all.tar.gz doesn't seem to exist in /opt/local/var/macports/distfiles/cdf ---> Attempting to fetch cdf34_1-dist-all.tar.gz from ftp://cdaweb.gsfc.nasa.gov/pub/cdf/dist/cdf34_1/unix % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 1718k 100 1718k 0 0 710k 0 0:00:02 0:00:02 --:--:-- 750k ---> Verifying checksum(s) for cdf ---> Checksumming cdf34_1-dist-all.tar.gz Error: Checksum (rmd160) mismatch for cdf34_1-dist-all.tar.gz Portfile checksum: cdf34_1-dist-all.tar.gz rmd160 4e3ebd5892c63db07a9f33fca9a3527883c5e09a Distfile checksum: cdf34_1-dist-all.tar.gz rmd160 e6783d91886bc99869f1e01eba80f22cf70a07d3 Error: Checksum (sha256) mismatch for cdf34_1-dist-all.tar.gz Portfile checksum: cdf34_1-dist-all.tar.gz sha256 a8779a3c34c7aa123e6231960db21a5c321baf09f1725319bf358b05af58b666 Distfile checksum: cdf34_1-dist-all.tar.gz sha256 460b56dd82b900c0b2893c61240ffd83d875457c99de3ebf4e2ad222157625f4 The correct checksum line may be: checksums rmd160 e6783d91886bc99869f1e01eba80f22cf70a07d3 \ sha256 460b56dd82b900c0b2893c61240ffd83d875457c99de3ebf4e2ad222157625f4 Error: org.macports.checksum for port cdf returned: Unable to verify file checksums Warning: targets not executed for cdf: org.macports.activate \ org.macports.checksum org.macports.extract org.macports.patch \ org.macports.configure org.macports.build org.macports.destroot \ org.macports.install Please see the log file for port cdf for details: /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_release_tarballs_ports_science_cdf/cdf/main.log To report a bug, follow the instructions in the guide: http://guide.macports.org/#project.tickets Error: Processing of port cdf failed }}} The downloaded tarball looks like a proper archive of cdf, and the MD5 checksum agrees with the one [ftp://cdaweb.gsfc.nasa.gov/pub/cdf/dist/cdf34_1/unix/cdf34_1-dist- all.tar.gz.md5 published] on the [ftp://cdaweb.gsfc.nasa.gov/pub/cdf/dist/cdf34_1/unix/ cdf FTP server]. The files on the cdf FTP server were last modified yesterday, however the [ftp://cdaweb.gsfc.nasa.gov/pub/cdf/dist/cdf34_1/unix/CHANGES.txt CHANGES.txt] does not give any indication of that change. Logfile is attached. -- Ticket URL: <https://trac.macports.org/ticket/35017> MacPorts <http://www.macports.org/> Ports system for Mac OS