Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 11 Feb 2005 00:03:44 +0100
From:      =?iso-8859-15?Q?Andr=E9_Eriksson?= <rm100@kth.se>
To:        ports@freebsd.org
Cc:        ports@freebsd.org
Subject:   FreeBSD Port: pgp-2.6.3i_1
Message-ID:  <opslz7oidrkysqvo@aluminium>

next in thread | raw e-mail | index | archive | help
Hi

I was just about to install this port (pgp-2.6.3i_1) with portinstall, but  
I received the following output:


$ portinstall pgp
[Updating the pkgdb <format:bdb1_btree> in /var/db/pkg ... - 47 packages  
found (-0 +2) .. done]
INDEX-5.bz2                                   100% of  614 kB  142 kBps
done
[Updating the portsdb <format:bdb1_btree> in /usr/ports ... - 12368 port  
entries found  
.........1000.........2000.........3000.........4000.........5000.........6000.........7000.........8000.........9000.........10000.........11000.........12000...  
..... done]
--->  Found 2 ports matching 'pgp':
         security/pgp
         security/pgp6
Install 'security/pgp'? [yes]
Install 'security/pgp6'? [yes] no
--->  Installing 'pgp-2.6.3i_1' from a port (security/pgp)
--->  Building '/usr/ports/security/pgp'
===>  Cleaning for pgp-2.6.3i_1
===>  Vulnerability check disabled, database not found
=> pgp263is.tar.gz doesn't seem to exist in /usr/ports/distfiles/.
=> Attempting to fetch from ftp://ftp.ifi.uio.no/pub/pgp/2.x/src/.
pgp263is.tar.gz                               100% of  593 kB  535 kBps
===>  Extracting for pgp-2.6.3i_1
=> Checksum mismatch for pgp263is.tar.gz.
===>  Refetch for 1 more times files: pgp263is.tar.gz
===>  Vulnerability check disabled, database not found
=> pgp263is.tar.gz doesn't seem to exist in /usr/ports/distfiles/.
=> Attempting to fetch from ftp://ftp.ifi.uio.no/pub/pgp/2.x/src/.
===>  Vulnerability check disabled, database not found
=> Checksum mismatch for pgp263is.tar.gz.
===>  Giving up on fetching files: pgp263is.tar.gz
Make sure the Makefile and distinfo file (/usr/ports/security/pgp/distinfo)
are up to date.  If you are absolutely sure you want to override this
check, type "make NO_CHECKSUM=yes [other args]".
*** Error code 1

Stop in /usr/ports/security/pgp.
*** Error code 1

Stop in /usr/ports/security/pgp.
** Command failed [exit code 1]: /usr/bin/script -qa  
/tmp/portinstall1741.0 make
** Fix the problem and try again.
** Listing the failed packages (*:skipped / !:failed)
         ! security/pgp  (checksum mismatch)
--->  Packages processed: 0 done, 0 ignored, 0 skipped and 1 failed
$


Is this due to some sloppy admin? Or is the server compromised? I checked  
the MD5 checksum for the file  
(ftp://ftp.ifi.uio.no/pub/pgp/2.x/src/pgp263is.tar.gz):
MD5 (pgp263is.tar.gz) = 64efb796cf3ae91c7d6e0f1a7874e050

/usr/ports/security/pgp/distinfo contains:
MD5 (pgp263is.tar.gz) = 73bbb87b8c77debcf9de3b9d49902892
SIZE (pgp263is.tar.gz) = 607982

The file size match.

Just before I typed "portinstall pgp" I cvsup:ed the ports source from  
cvsup2.se.freebsd.org.

After I ran "portinstall pgp" i cvsup:ed towards cvsup.freebsd.org  
instead. No pgp related files where updated.

This is the system i'm running:
$ uname -a
FreeBSD steel.room.org 5.3-RELEASE FreeBSD 5.3-RELEASE #0: Thu Jan  6  
18:41:35 CET 2005     root@steel.room.org:/usr/obj/usr/src/sys/STEEL  i386


/André Eriksson  - rm100@kth.se



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?opslz7oidrkysqvo>