When I attempt to make clamav-0.91.2 using:
  setenv CVSROOT [EMAIL PROTECTED]:/cvs
# or: setenv CVSROOT [EMAIL PROTECTED]:/cvs
  cd /usr ; cvs checkout -P ports/security/clamav
  make

I get the messages:

>> Size matches for /usr/ports/distfiles/clamav-0.91.2.tar.gz
>> Checksum mismatch for clamav-0.91.2.tar.gz. (sha1)
Make sure the Makefile and checksum file (/usr/ports/security/clamav/distinfo)
are up to date.  If you want to fetch a good copy of this
file from the OpenBSD main archive, type
"make REFETCH=true [other args]".
*** Error code 1

Stop in /usr/ports/security/clamav (line 1639 of 
/usr/ports/infrastructure/mk/bsd.port.mk).
*** Error code 1

Stop in /usr/ports/security/clamav (line 1767 of 
/usr/ports/infrastructure/mk/bsd.port.mk).

The "distinfo" file contents is:

MD5 (clamav-0.91.2.tar.gz) = KnJl0Xz6gMMoWJePFqP0ew==
RMD160 (clamav-0.91.2.tar.gz) = nhgaek/Qg3f/R2Y67Sf4zJckmiE=
SHA1 (clamav-0.91.2.tar.gz) = 8YAHwwRaHXiWetrYBcaTTUbKZBk=
SHA256 (clamav-0.91.2.tar.gz) = 2sneht/170yabkli2iSYjhqnSUiiG3+3t/7ReGfd8qA=
SIZE (clamav-0.91.2.tar.gz) = 13394538

But I get:

openssl sha1 /usr/ports/distfiles/clamav-0.91.2.tar.gz
SHA1(/usr/ports/distfiles/clamav-0.91.2.tar.gz)= 
f18007c3045a1d78967adad805c6934d46ca6419

md5 /usr/ports/distfiles/clamav-0.91.2.tar.gz
MD5 (/usr/ports/distfiles/clamav-0.91.2.tar.gz) = 
2a7265d17cfa80c32858978f16a3f47b

from the original "make", using "make REFETCH=true", and a manual download from
"ftp.opembsd.org" (/pub/OpenBSD/distfiles)

If I change the "md5" and "sha1" codes in the "distinfo" to what I generated the
make proceeds to completion with no other errors.

I've verified "md5" and "sha1" codes I got with those on a different system and 
they matched.

I've looked at 
http://www.openbsd.org/cgi-bin/cvsweb/~checkout~/ports/security/clamav/distinfo?rev=1.22
and the codes are the same as what in in "distinfo" (just as you'd expect).

How do I proceed from here?

Which CVS site should I be using?

Since neither the "md5" nor "sha1" code match those in "distinfo" I would 
assume it is unsafe to
use the clamav-0.91.2.tar.gz file I've downloaded?

Thanks,

Joe

Reply via email to