[ATrpms-users] checksum issues

[John McNair]

I am having trouble with checksums in the fedora core 5 atrpms 'updates'
repo.  I am trying to use the configuration in /etc/yum.repos.d/base.repo
included in the atrpms-package-config-108-1.rhfc5.at package.

I had already commented out the [updates] section in
fedora-updates.repothat is included in the fedora-release-5-5 package
because having two
identically named sections is obviously not good.

When trying to run 'yum upgrade', I get the same error on several packages:

(1/33): ntp-4.2.0.a.20050 100% |=========================| 1.2 MB    00:03
http://dl.atrpms.net/fc5-i386/redhat/updates/ntp-4.2.0.a.20050816-11.FC5.i386.rpm:
[Errno -1] Package does not match checksum
Trying other mirror.
http://ayo.freshrpms.net/fedora/linux/5/i386/updates/ntp-4.2.0.a.20050816-11.FC5.i386.rpm:
[Errno 14] HTTP Error 404: Date: Fri, 26 May 2006 03:19:53 GMT
Server: Apache/2.2.2 (Unix)
Content-Length: 342
Content-Type: text/html; charset=iso-8859-1
Trying other mirror.
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/i386/ntp-4.2.0.a.20050816-11.FC5.i386.rpm:
[Errno 9] Requested Range Not Satisfiable
Trying other mirror.

So yum is not happy about the checksum from dl.atrpms.net, and
download.fedora.redhat.com fails for yet another reason.  I verified the
checksum manually for ntp, and it is indeed wrong.  At least it appears to
be.

I used wget to retrieve primary.xml.gz and the ntp rpm to ensure that I
didn't get bounced to a mirror:
wget http://dl.atrpms.net/fc5-i386/redhat/updates/repodata/primary.xml.gz
wget
http://dl.atrpms.net/fc5-i386/redhat/updates/ntp-4.2.0.a.20050816-11.FC5.i386.rpm

I used 'zcat primary.xml.gz | xml_pp > foo.out' to make that file easier to
read.  I found the ntp entry, and it had a checksum of type 'sha' with a
value of 'c1cea36fd59590dd0f3be799556b5db709769f5b'.  I ran sha1sum on
ntp-4.2.0.a.20050816-11.FC5.i386.rpm and got
'7d3380570a9a0a71631dc42f82d2d75adc09eeae'.  So they are indeed different.

For kicks I repeated the exercise using:
wget
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/i386/repodata/primary.xml.gz
wget
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/i386/ntp-4.2.0.a.20050816-11.FC5.i386.rpm

Both the checksum inside the fedora primary.xml.gz and the output of sha1sum
were '7d3380570a9a0a71631dc42f82d2d75adc09eeae'.  So the two repos had
identical files, but the atrpms primary.xml.gz had the wrong checksum.

I saw another thread from a couple of weeks ago with the same problem but no
real resolution.  The answer seemed to be that this works for all but some
select group of people.

So, any clues what I'm doing wrong?  I guess it's okay for me to leave
things as is, but it would be cool if setting up atrpms didn't require so
much manual intervention.

-- 
John McNair
john at mcnair.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.atrpms.net/pipermail/atrpms-users/attachments/20060526/ebfecea6/attachment.html