https://bugzilla.novell.com/show_bug.cgi?id=385871
Summary: Corrupted downloads (bad SHA-1 checksum)
Product: openSUSE.org
Version: unspecified
Platform: Other
OS/Version: Other
Status: NEW
Severity: Normal
Priority: P5 - None
Component: Download Infrastructure
AssignedTo: poeml@novell.com
ReportedBy: Ulrich.Windl@rz.uni-regensburg.de
QAContact: adrian@novell.com
Found By: ---
(I use my own program to get online-updates. It seems I got bad checksums when
tying to get updates when the repository was also updated)
For the downloads (repomd.xml) for openSUSE 10.3 i386 signed with:
gpg: Unterschrift vom Mi 30 Apr 2008 16:03:40 CEST mittels DSA-Schlüssel ID
9C800ACA
gpg: Korrekte Unterschrift von "SuSE Package Signing Key "
I got incorrect downloads:
http://download.opensuse.org/update/10.3/repodata/patches.xml had checksum
039cdcefee9da833f804be0c68b041035670de5d, but expected (and signed) checksum
was
b6f743fb91aff0a671e2a1e8e644dc324d0c6e8c
The same is true for
'http://download.opensuse.org/update/10.3/repodata/filelists.xml.gz: signed
checksum is 5abcd97ace017ac65f73adfe1c207ce226cf696c, but actual checksum is
2914eb92419dcac2fa03ed4f50a476970754dc47.
http://download.opensuse.org/update/10.3/repodata/other.xml.gz also has the
wrong checksum: Expected was c10dce27702b9e0b54eb0796b779292169ed9dbd, but the
download had d4460dd91ce3cdbd2ced3b7e29024bd406e83f29.
Finally http://download.opensuse.org/update/10.3/repodata/primary.xml.gz also
had a bad checksum (expected 2c3c4423397d7c60af11435b84bf8a7723c228d0, but got
16ebfd3ce26fac54b09467826312b43c171784ac).
Download attempt was 2008-05-02 07:47 MEST (== 05:47 UTC)
Is it possible to implement a more transactional update un the source side?
Meanwhile the current updates are signed as:
gpg: Unterschrift vom Fr 02 Mai 2008 07:50:12 CEST mittels DSA-Schlüssel ID
9C800ACA
gpg: Korrekte Unterschrift von "SuSE Package Signing Key "
--
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
