[MacPorts] #50835: qt4-mac Failed to verify signature for archive!

[MacPorts]

#50835: qt4-mac Failed to verify signature for archive!
-----------------------------------+-------------------------
  Reporter:  jorgeantoniorivera@…  |      Owner:  michaelld@…
      Type:  defect                |     Status:  new
  Priority:  Normal                |  Milestone:
 Component:  ports                 |    Version:  2.3.4
Resolution:                        |   Keywords:
      Port:  qt4-mac               |
-----------------------------------+-------------------------

Comment (by jorgeantoniorivera@…):

 Hello all.

 I am sorry for my forms, this is my first report, after many year as
 casual user.

 I was positively sure, that file was not corrupted.
 I downloaded it several times. And I could uncompress it correctly.

 I want to discard a security problem in this port, because others critical
 port depend of it, KeePassX for the sample.

 But, today I am trying again, and result is the same that you say:
 {{{
 RIPEMD160(/tmp/qt4-mac-4.8.7_4.darwin_12.x86_64.tbz2)=
 8df11b5f66c4e950ab709230a616133f1187230e
 }}}


 Anyway, the rmd160 digest in Portfile is different.
 {{{
 checksums           rmd160 afb5e5a99388e6429faca59cb5000054feffd166
 }}}


 Does this have any explanation?

 Thank you so much.
 Best regards.


 {{{
 $ wget -v
 http://packages.macports.org/qt4-mac/qt4-mac-4.8.7_4.darwin_12.x86_64.tbz2
 --2016-03-08 10:02:11--
 http://packages.macports.org/qt4-mac/qt4-mac-4.8.7_4.darwin_12.x86_64.tbz2
 Resolving packages.macports.org (packages.macports.org)... 198.232.124.36
 Connecting to packages.macports.org
 (packages.macports.org)|198.232.124.36|:80... connected.

 HTTP request sent, awaiting response... 200 OK
 Length: 175965002 (168M) [application/x-bzip2]
 Saving to: ‘qt4-mac-4.8.7_4.darwin_12.x86_64.tbz2’

 qt4-mac-4.8.7_4.darwin_12.x86
 100%[=================================================>] 167.81M  1.90MB/s
 in 83s

 2016-03-08 10:03:34 (2.03 MB/s) - ‘qt4-mac-4.8.7_4.darwin_12.x86_64.tbz2’
 saved [175965002/175965002]

 $ openssl dgst -rmd160 /tmp/qt4-mac-4.8.7_4.darwin_12.x86_64.tbz2
 RIPEMD160(/tmp/qt4-mac-4.8.7_4.darwin_12.x86_64.tbz2)=
 8df11b5f66c4e950ab709230a616133f1187230e
 }}}

-- 
Ticket URL: <https://trac.macports.org/ticket/50835#comment:4>
MacPorts <https://www.macports.org/>
Ports system for OS X