« Return to Thread: Can update from sought.rules.yerp.org as I get SHA1 verification failed

Re: Can update from sought.rules.yerp.org as I get SHA1 verification failed

by Justin Mason :: Rate this Message:

it seems to have resolved itself.

: 26...; wget http://yerp.org/rules/stage/320790737.tar.gz.sha1; wget
http://yerp.org/rules/stage/320790737.tar.gz
--2009-07-03 09:59:56-- http://yerp.org/rules/stage/320790737.tar.gz.sha1
Resolving yerp.org... 216.180.243.10
Connecting to yerp.org|216.180.243.10|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 98 [application/x-gzip]
Saving to: `320790737.tar.gz.sha1'

100%[=========================================================>] 98
--.-K/s in 0s

2009-07-03 09:59:56 (10.4 MB/s) - `320790737.tar.gz.sha1' saved [98/98]

--2009-07-03 09:59:56-- http://yerp.org/rules/stage/320790737.tar.gz
Resolving yerp.org... 216.180.243.10
Connecting to yerp.org|216.180.243.10|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 57294 (56K) [application/x-gzip]
Saving to: `320790737.tar.gz'

100%[=========================================================>]
57,294 163K/s in 0.3s

2009-07-03 09:59:56 (163 KB/s) - `320790737.tar.gz' saved [57294/57294]

: 27...; sha1sum 320790737.tar.gz
e789d5fdcdcac78da7d4f3a13eb5b8432a5c3270 320790737.tar.gz

: 28...; cat 320790737.tar.gz.sha1
e789d5fdcdcac78da7d4f3a13eb5b8432a5c3270
/home/jm/ftp/sandboxupdates/tmp/sought.3.2.x/update.tgz

: 34...; curl http://yerp.org/rules/GPG.KEY | gpg --import
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 2437 100 2437 0 0 10301 0 --:--:-- --:--:-- --:--:-- 1291k
gpg: key 6C6191E3: public key "Justin Mason Signing Key (Code Signing
Only) <signingkey@...>" imported
gpg: Total number processed: 1
gpg: imported: 1

: 35...; gpg --verify 320790737.tar.gz.asc 320790737.tar.gz
gpg: Signature made Thu Jul 2 21:29:30 2009 UTC using DSA key ID 6C6191E3
gpg: Good signature from "Justin Mason Signing Key (Code Signing Only)
<signingkey@...>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 8D25 B5E9 1DAF 0F71 5F60 B588 DC85 341F 6C61 91E3

I'm not sure, but I suspect the data served by the httpd for
320790737.tar.gz was corrupted in some way, not sure why; but the
signatures caught it, and it's now back to normal again.

--j.

On Fri, Jul 3, 2009 at 10:43, Justin Mason<jm@...> wrote:

> yep, seeing that here too. Investigating...
>
> On Fri, Jul 3, 2009 at 08:42, Brent Clark<brentgclarklist@...> wrote:
>> Hiya
>>
>> Im having a little problem with updating.
>>
>> [13860] dbg: plugin: Mail::SpamAssassin::Plugin::MIMEHeader=HASH(0x9ccb9c0)
>> implements 'finish_tests', priority 0
>> [13860] dbg: plugin: Mail::SpamAssassin::Plugin::Check=HASH(0x9e46fe8)
>> implements 'finish_tests', priority 0
>> [13860] dbg: generic: lint check of site pre files succeeded, continuing
>> with channel updates
>> [13860] dbg: channel: reading MIRRORED.BY file
>> [13860] dbg: channel: found mirror http://yerp.org/rules/stage/
>> [13860] dbg: channel: selected mirror http://yerp.org/rules/stage
>> [13860] dbg: http: GET request, http://yerp.org/rules/stage/320790737.tar.gz
>> [13860] dbg: http: GET request,
>> http://yerp.org/rules/stage/320790737.tar.gz.sha1
>> [13860] dbg: http: GET request,
>> http://yerp.org/rules/stage/320790737.tar.gz.asc
>> [13860] dbg: http: IMS GET request, http://yerp.org/rules/stage/MIRRORED.BY,
>> Mon, 01 Dec 2008 04:20:22 GMT
>> [13860] dbg: sha1: verification wanted: 320790737
>> [13860] dbg: sha1: verification result:
>> a9dbb531b21b74b2cb5b51bca7cd0352493e6a59
>> channel: SHA1 verification failed, channel failed
>> [13860] dbg: generic: cleaning up temporary directory/files
>> [13860] dbg: diag: updates complete, exiting with code 4
>>
>> Would you know how I could fix this?
>>
>> Kind Regards
>> Brent Clark
>>
>>
>

« Return to Thread: Can update from sought.rules.yerp.org as I get SHA1 verification failed