#48268: curl-ca-bundle @7.43.0: Checksum mismatch for certdata-aa275ad846f1.tar.bz2 -----------------------------+-------------------------- Reporter: ph@… | Owner: ryandesign@… Type: defect | Status: assigned Priority: Normal | Milestone: Component: ports | Version: 2.3.3 Resolution: | Keywords: Port: curl-ca-bundle | -----------------------------+-------------------------- Changes (by ryandesign@…): * status: new => assigned * owner: macports-tickets@… => ryandesign@… * port: => curl-ca-bundle Comment: I can confirm this. The tar.bz2 file the Mozilla server delivers today is different from the one it delivered to us when we originally updated curl- ca-bundle to its current version in r135276 on April 21, 2015. Notably, the tar files inside the two tar.bz2 files are identical, as are the files inside the two identical tar files. I'm not sure why the Mozilla server would be doing different bzip2 compression of its tarballs today than it did in April. But the tarballs are automatically generated, so it's likely they don't keep the generated tarballs around indefinitely, and that since the last time the tarball was generated, they changed the version of their bzip2 software, or changed the options with which it is invoked, such that the compressed result differs. The fact that it started working after you updated Firefox can only be a coincidence. It's more likely that when you cleaned and tried again after updating Firefox, MacPorts happened to try to download the file from our mirror servers (which have the old file with the correct checksums) instead of the Mozilla server (which now has the new file with the different checksums). -- Ticket URL: <https://trac.macports.org/ticket/48268#comment:2> MacPorts <https://www.macports.org/> Ports system for OS X