Date: Thu, 29 Sep 2011 09:30:44 -0800 From: Beech Rintoul <beech@freebsd.org> To: freebsd-questions@freebsd.org Cc: Kurt Buff <kurt.buff@gmail.com> Subject: Re: libgcrypt SHA256 mismatch? Message-ID: <201109290930.44712.beech@freebsd.org> In-Reply-To: <CADy1Ce74SaU8mUbA_LqxONdUv8CtuCYGGaiLWtjZtRYdVD9OJg@mail.gmail.com> References: <CADy1Ce5uZa9O1kTWe1rN0Wo6N1r0kLbdbRXJ=Ntaq8cTN6mXsA@mail.gmail.com> <alpine.BSF.2.00.1109282034210.61731@abbf.6qbyyneqvnyhc> <CADy1Ce74SaU8mUbA_LqxONdUv8CtuCYGGaiLWtjZtRYdVD9OJg@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thursday 29 September 2011 09:21:14 Kurt Buff wrote: > On Wed, Sep 28, 2011 at 18:45, Lars Eighner <portsuser@larseighner.com> wrote: > > On Wed, 28 Sep 2011, Kurt Buff wrote: > >> All, > >> > >> I've just spun up a new 8.2-RELEASE VM, and gotten a fresh ports tree. > >> I tried to install XFCE4, but it has ended with an error: > >> > >> ===> Verifying install for gcrypt.18 in /usr/ports/security/libgcrypt > >> ===> License GPLv2 LGPL21 accepted by the user > >> ===> Extracting for libgcrypt-1.5.0 > >> => SHA256 Checksum mismatch for libgcrypt-1.5.0.tar.bz2. > >> ===> Refetch for 1 more times files: libgcrypt-1.5.0.tar.bz2 > >> ===> License GPLv2 LGPL21 accepted by the user > >> => libgcrypt-1.5.0.tar.bz2 doesn't seem to exist in > >> /usr/ports/distfiles/. => Attempting to fetch > >> http://gnupg.org.favoritelinks.net/libgcrypt/libgcrypt-1.5.0.tar.bz2 > >> fetch: > >> http://gnupg.org.favoritelinks.net/libgcrypt/libgcrypt-1.5.0.tar.bz2: > >> size unknown > >> fetch: > >> http://gnupg.org.favoritelinks.net/libgcrypt/libgcrypt-1.5.0.tar.bz2: > >> size of remote file is not known > >> libgcrypt-1.5.0.tar.bz2 4634 B 5734 kBps > >> ===> License GPLv2 LGPL21 accepted by the user > >> => SHA256 Checksum mismatch for libgcrypt-1.5.0.tar.bz2. > >> ===> Giving up on fetching files: libgcrypt-1.5.0.tar.bz2 > >> Make sure the Makefile and distinfo file > >> (/usr/ports/security/libgcrypt/distinfo) > >> are up to date. If you are absolutely sure you want to override this > >> check, type "make NO_CHECKSUM=yes [other args]". > >> > >> > >> Anyone else run into this? > > > > The source file is being truncated because fetch loses its connection for > > one reason or another. Many servers now cut you off if you are at > > dial-up speeds because "net fairness" means broadband users always go to > > the front of the line. > > > > You can make a shell script to fetch the file and keep running it until > > you finally get the whole file a piece at a time or you can try ftp. > > When you have the whole source file (check it against distinfo) place > > it in /usr/ports/distfiles. Things should go fine. > > > > "Checksum mismatch" nearly always means a truncated file. I cannot ever > > remember seeing it otherwise. Do not override it with NO_CHECKSUM. That > > will be useless with a truncated file and worse than useless if a > > security port really has been tampered with. > > Interesting. I found out what the problem is, but haven't figured out > how to work around it. > > As a test, I put the URL > (http://gnupg.org.favoritelinks.net/libgcrypt/libgcrypt-1.5.0.tar.bz2) > into a web browser, and found that it's being blocked by our web > filter, because the site is marked as also serving adult content. The > supposed tarball in /usr/ports/distfiles is the response from the web > filter, so it's junk. > > After repeated fetches, that is the only site my machine is using to > grab the tarball. How to I tell the machine to vary its download sites > (if indeed there are alternatives?) > > In the Makefile I see the line > > MASTER_SITES= ${MASTER_SITE_GNUPG} > > which I'd bet controls how it finds what sites to visit, but don't > know anything beyond that. It's also mirrored on the freebsd servers. Grab it from: ftp.freebsd.org/pub/FreeBSD/distfiles/libgcrypt-1.5.0.tar.bz2 Put the file in /usr/ports/distfiles Beech -- --------------------------------------------------------------------------------------- Beech Rintoul - FreeBSD Developer - beech@FreeBSD.org /"\ ASCII Ribbon Campaign | FreeBSD Since 4.x \ / - NO HTML/RTF in e-mail | http://people.freebsd.org/~beech X - NO Word docs in e-mail | Skype: akbeech / \ - http://www.FreeBSD.org/releases/8.2R/announce.html ---------------------------------------------------------------------------------------
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201109290930.44712.beech>