Opened 10 years ago

Closed 8 years ago

#47287 closed defect (fixed)

dumpasn1 checksum mismatch

Reported by: macports@… Owned by: kurthindenburg (Kurt Hindenburg)
Priority: Normal Milestone:
Component: ports Version: 2.3.3
Keywords: Cc: Serge3leo (Serguei E. Leontiev)
Port: dumpasn1

Description (last modified by ryandesign (Ryan Carsten Schmidt))

:error:checksum Checksum (sha256) mismatch for dumpasn1.c
:info:checksum Portfile checksum: dumpasn1.c sha256 514e3b49adb0b2e49f8bcfc47c20c5f4202bc7e9f7b1e90bcd4d4cf592d469f4
:info:checksum Distfile checksum: dumpasn1.c sha256 d0d77c951a0471c88f14db6d3f6ca32f6492954f4b1c7d2aedbf4fe97905b32c
wget https://www.cs.auckland.ac.nz/~pgut001/dumpasn1.c
d0d77c951a0471c88f14db6d3f6ca32f6492954f4b1c7d2aedbf4fe97905b32c  dumpasn1.c

upstream seems to have silently 'upgraded'

Attachments (2)

dumpasn1-main.log (5.6 KB) - added by Serge3leo (Serguei E. Leontiev) 9 years ago.
dumpasn1-151225.patch (1.0 KB) - added by Serge3leo (Serguei E. Leontiev) 9 years ago.

Download all attachments as: .zip

Change History (9)

comment:1 Changed 10 years ago by ryandesign (Ryan Carsten Schmidt)

Description: modified (diff)
Owner: changed from macports-tickets@… to cjr@…

The checksum mismatch FAQ entry should be consulted. If this really was a silent upstream update, the stealth update recipe should be followed.

comment:2 Changed 10 years ago by macports@…

https://web.archive.org/web/20120203134243/http://www.cs.auckland.ac.nz/~pgut001/dumpasn1.c has the sha256 hash: 514e3b49adb0b2e49f8bcfc47c20c5f4202bc7e9f7b1e90bcd4d4cf592d469f4 dumpasn1.c which matches the portfile checksum. The diff from this version to today is massive, but the header is clear:

< /* ASN.1 object dumping code, copyright Peter Gutmann ---

/* ASN.1 data display code, copyright Peter Gutmann

10c10 < updated 12 November 2010 (version 20101112, if you prefer it that way). ---

updated 19 December 2014 (version 20141219, if you prefer it that way).

So yes, the source files were clearly 'stealth upgraded' by the upstream author.

comment:3 Changed 9 years ago by Serge3leo (Serguei E. Leontiev)

Don't fetch and don't check.

" Available from http://www.cs.auckland.ac.nz/~pgut001/dumpasn1.c. Last

updated 8 August 2015 (version 20150808, if you prefer it that way). "

Workaround:

$ sudo port edit dumpasn1

Change:

homepage	https://www.cs.auckland.ac.nz/~pgut001/

checksums	dumpasn1.c \
		sha256  6e3942e1f61f309358837c4b69972b80267e3fe881b1c1f064425bbb145a5c74 \
		dumpasn1.cfg \
		sha256  cae4ec2cca1d22e7ac0e95d87d9e806e1e2629eb226147a050312b450e8daab6

comment:4 Changed 9 years ago by Serge3leo (Serguei E. Leontiev)

Cc: leo@… added

Cc Me!

Changed 9 years ago by Serge3leo (Serguei E. Leontiev)

Attachment: dumpasn1-main.log added

Changed 9 years ago by Serge3leo (Serguei E. Leontiev)

Attachment: dumpasn1-151225.patch added

comment:5 Changed 9 years ago by macports@…

leo, thanks for adding that patch, I assumed it was the responsibility of the package owner to fix the issue.

comment:6 Changed 8 years ago by kurthindenburg (Kurt Hindenburg)

Owner: cjr@… deleted
Status: newassigned

comment:7 Changed 8 years ago by kurthindenburg (Kurt Hindenburg)

Owner: set to kurthindenburg
Resolution: fixed
Status: assignedclosed

In 15cfd64/macports-ports:

dumpasn1: update to 20150808

Move to use Debian's distfile and patches to make this easier to
update. The downloading of the homepage's 2 distfiles often failed
and did't allow version controlling.

closes #53032
closes #47287

Note: See TracTickets for help on using tickets.