From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ludovic =?UTF-8?Q?Court=C3=A8s?= Subject: bug#35561: Fresh install, guix pull exits with error, hash mismatch Date: Tue, 07 May 2019 00:33:56 +0200 Message-ID: <871s1bfc17.fsf@gnu.org> References: Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([209.51.188.92]:45364) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1hNmCN-00054x-5h for bug-guix@gnu.org; Mon, 06 May 2019 18:35:04 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1hNmCL-0003dC-V4 for bug-guix@gnu.org; Mon, 06 May 2019 18:35:03 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:44172) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1hNmCL-0003ck-S2 for bug-guix@gnu.org; Mon, 06 May 2019 18:35:01 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1hNmCL-0000As-It for bug-guix@gnu.org; Mon, 06 May 2019 18:35:01 -0400 Sender: "Debbugs-submit" Resent-Message-ID: In-Reply-To: (Calle Kabo's message of "Sat, 4 May 2019 09:43:17 +0200 (CEST)") List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: Calle Kabo Cc: 35561@debbugs.gnu.org Hi, Calle Kabo skribis: > manager@guix ~$ guix pull [...] > building /gnu/store/vf1ni4bdwlya3f5ii7wq6agiwdvzapmw-letsencryptauthority= x3.pem.drv... > downloading from https://letsencrypt.org/certs/letsencryptauthorityx3.pem= ... > |sha256 hash mismatch for /gnu/store/bcq7sqhg18b7b1q87j8z60d5hybsdafm-let= sencryptauthorityx3.pem: > expected hash: 0zbamj6c7zqw1j9mbqygc8k1ykgj6xiisp9svmlif5lkbnyjhnkk > actual hash: 1kvac1dhm1d02bhrfj6l1cz1dpldz6ishb78zzvy8245zgvh7pdn > hash mismatch for store item '/gnu/store/bcq7sqhg18b7b1q87j8z60d5hybsdafm= -letsencryptauthorityx3.pem' These 3 files are now available from https://ci.guix.gnu.org as substitutes: --8<---------------cut here---------------start------------->8--- $ sha1sum *.pem af259e2e2ebd686861e3f89be6845298bed6c223 isrgrootx1.pem 36205ada14d1cded7e85294762630b6b57088198 letsencryptauthorityx3.pem 59057c31e97d8e10cc52edb389b1e87089a245aa letsencryptauthorityx4.pem $ for i in *.pem; do echo $(guix hash $i) $i ; done 0zhd1ps7sz4w1x52xk3v7ng6d0rcyi7y7rcrplwkmilnq5hzjv1y isrgrootx1.pem 0zbamj6c7zqw1j9mbqygc8k1ykgj6xiisp9svmlif5lkbnyjhnkk letsencryptauthorityx3= .pem 003dc94c8qwj634h0dq743x7hqv9rdcfaisdksprkmi2jd107xq4 letsencryptauthorityx4= .pem --8<---------------cut here---------------end--------------->8--- and the =E2=80=98le-certs=E2=80=99 package itself is now available as a sub= stitute from ci.guix.gnu.org. For the record, this failure stems from the combination of two issues: (1) letsencrypt.org modified these PEM files in place, and (2) the old copies had disappeared from ci.guix.gnu.org. Fortunately they were still on mirror.hydra.gnu.org, which is where I copied them frmo. We should also update our =E2=80=98le-certs=E2=80=99 package definition to = refer to the new file hashes. Ludo=E2=80=99.