#37637: sqlite3 archive is not properly signed --------------------------+-------------------------------- Reporter: f.calboli@… | Owner: macports-tickets@… Type: defect | Status: new Priority: Normal | Milestone: Component: ports | Version: 2.1.2 Resolution: | Keywords: Port: sqlite3 | --------------------------+-------------------------------- Changes (by ryandesign@…): * keywords: sqlite3; archive => * cc: mww@… (added) * port: => sqlite3 Old description:

The following installed ports are outdated: sqlite3 3.7.15.1_0 < 3.7.15.2_0 yyyyyy@xxxxxxy:~$ sudo port -u upgrade outdated ---> Computing dependencies for sqlite3 ---> Fetching archive for sqlite3 ---> Attempting to fetch sqlite3-3.7.15.2_0.darwin_12.x86_64.tbz2 from http://jog.id.packages.macports.org/macports/packages/sqlite3 ---> Attempting to fetch sqlite3-3.7.15.2_0.darwin_12.x86_64.tbz2.rmd160 from http://jog.id.packages.macports.org/macports/packages/sqlite3 Error: org.macports.archivefetch for port sqlite3 returned: Failed to verify signature for archive! Please see the log file for port sqlite3 for details: /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_release_tarballs_ports_databases_sqlite3/sqlite3/main.log Error: Unable to upgrade port: 1 To report a bug, follow the instructions in the guide: http://guide.macports.org/#project.tickets

New description: {{{ The following installed ports are outdated: sqlite3 3.7.15.1_0 < 3.7.15.2_0 yyyyyy@xxxxxxy:~$ sudo port -u upgrade outdated ---> Computing dependencies for sqlite3 ---> Fetching archive for sqlite3 ---> Attempting to fetch sqlite3-3.7.15.2_0.darwin_12.x86_64.tbz2 from http://jog.id.packages.macports.org/macports/packages/sqlite3 ---> Attempting to fetch sqlite3-3.7.15.2_0.darwin_12.x86_64.tbz2.rmd160 from http://jog.id.packages.macports.org/macports/packages/sqlite3 Error: org.macports.archivefetch for port sqlite3 returned: Failed to verify signature for archive! Please see the log file for port sqlite3 for details: /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_release_tarballs_ports_databases_sqlite3/sqlite3/main.log Error: Unable to upgrade port: 1 To report a bug, follow the instructions in the guide: http://guide.macports.org/#project.tickets }}} -- Comment: I don't know why that would be. -- Ticket URL: <https://trac.macports.org/ticket/37637#comment:1> MacPorts <http://www.macports.org/> Ports system for Mac OS

#37637: sqlite3 archive is not properly signed --------------------------+-------------------------------- Reporter: f.calboli@… | Owner: macports-tickets@… Type: defect | Status: new Priority: Normal | Milestone: Component: ports | Version: 2.1.2 Resolution: | Keywords: Port: sqlite3 | --------------------------+-------------------------------- Comment (by f.calboli@…): Replying to [comment:2 cal@…]:

Downloading from the jog.id and mse.uk mirror both give me the same file (and signature). I have also verified the file against the macports pubkey and it comes back correct.

Maybe a bit flipped while you were downloading?

from logs I see: :debug:archivefetch failed verification with key /opt/local/share/macports /macports-pubkey.pem :debug:archivefetch openssl output: Verification Failure child process exited abnormally :error:archivefetch org.macports.archivefetch for port sqlite3 returned: Failed to verify signature for archive! :debug:archivefetch Error code: NONE :debug:archivefetch Backtrace: Failed to verify signature for archive! while executing "portarchivefetch::fetchfiles" (procedure "portarchivefetch::archivefetch_main" line 5) invoked from within "$procedure $targetname" :info:archivefetch Warning: targets not executed for sqlite3: org.macports.install org.macports.archivefetch org.macports.fetch org.macports.checksum org.macports.extract org.macports.patch org.macports.configure org.macports.build org.macports.destroot :notice:archivefetch Please see the log file for port sqlite3 for details: /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_release_tarballs_ports_databases_sqlite3/sqlite3/main.log do I need to delete /opt/local/share/macports/macports-pubkey.pem? BW F -- Ticket URL: <https://trac.macports.org/ticket/37637#comment:3> MacPorts <http://www.macports.org/> Ports system for Mac OS

#37637: sqlite3 archive is not properly signed --------------------------+-------------------------------- Reporter: f.calboli@… | Owner: macports-tickets@… Type: defect | Status: new Priority: Normal | Milestone: Component: ports | Version: 2.1.2 Resolution: | Keywords: Port: sqlite3 | --------------------------+-------------------------------- Comment (by f.calboli@…): Replying to [comment:4 jmr@…]:

Without macports-pubkey.pem you won't be able to verify any signatures at all. Are you having signature verification failures with every archive or just sqlite3?

only with sqlite3 that I know of, but that's the only port that needed upgrade. The issue seems to be resolved btw, so feel free to clse the ticket -- Ticket URL: <https://trac.macports.org/ticket/37637#comment:5> MacPorts <http://www.macports.org/> Ports system for Mac OS