SA-Update - SHA1 Verification failed
Hello all, I only run sa-update once per day and the last two days it has failed with a SHA1 verification error. Here is the debug output: (apologies for the line wrap(s)) ... [2208] dbg: plugin: Mail::SpamAssassin::Plugin::MIMEHeader=HASH(0xb0b2c3c) implements 'finish_tests', priority 0 [2208] dbg: plugin: Mail::SpamAssassin::Plugin::Check=HASH(0xb10c234) implements 'finish_tests', priority 0 [2208] dbg: generic: lint check of site pre files succeeded, continuing with channel updates [2208] dbg: channel: reading MIRRORED.BY file [2208] dbg: channel: found mirror http://daryl.dostech.ca/sa-update/sare/90_2tld.cf/ [2208] dbg: channel: found mirror http://updates.sa-update.com/sare/90_2tld.cf/ [2208] dbg: channel: selected mirror http://updates.sa-update.com/sare/90_2tld.cf [2208] dbg: http: GET request, http://updates.sa-update.com/sare/90_2tld.cf/200908170100.tar.gz [2208] dbg: http: GET request, http://updates.sa-update.com/sare/90_2tld.cf/200908170100.tar.gz.sha1 [2208] dbg: http: GET request, http://updates.sa-update.com/sare/90_2tld.cf/200908170100.tar.gz.asc [2208] dbg: http: IMS GET request, http://updates.sa-update.com/sare/90_2tld.cf/MIRRORED.BY, Wed, 12 Aug 2009 16:37:16 GMT [2208] dbg: sha1: verification wanted: 200908170100 [2208] dbg: sha1: verification result: 13a6b42853abe9f5d8a94d56d6c6e294b3783ac5 channel: SHA1 verification failed, channel failed [2208] dbg: generic: cleaning up temporary directory/files [2208] dbg: diag: updates complete, exiting with code 4 Is this a temporary mirror problem or something I should investigate further? Thanks for any help or suggestions Mark signature.asc Description: This is a digitally signed message part
Re: SA-Update - SHA1 Verification failed
Hi, On Wed, 19.08.2009 at 08:49:22 +0100, Arthur Dent misc.li...@blueyonder.co.uk wrote: I only run sa-update once per day and the last two days it has failed with a SHA1 verification error. I just discovered a very similar problem: # sa-update -D --channelfile /etc/mail/spamassassin/sare-sa-update-channels.txt --gpgkey 856AA88A ... lots of stuff, then: [26719] dbg: channel: reading MIRRORED.BY file [26719] dbg: channel: found mirror http://daryl.dostech.ca/sa-update/zmi/70_zmi_german.cf/ [26719] dbg: channel: found mirror http://updates.sa-update.com/zmi/70_zmi_german.cf/ [26719] dbg: channel: selected mirror http://updates.sa-update.com/zmi/70_zmi_german.cf [26719] dbg: http: GET request, http://updates.sa-update.com/zmi/70_zmi_german.cf/200906100942.tar.gz [26719] dbg: http: GET request, http://updates.sa-update.com/zmi/70_zmi_german.cf/200906100942.tar.gz.sha1 [26719] dbg: http: GET request, http://updates.sa-update.com/zmi/70_zmi_german.cf/200906100942.tar.gz.asc [26719] dbg: http: IMS GET request, http://updates.sa-update.com/zmi/70_zmi_german.cf/MIRRORED.BY, Sun, 15 Mar 2009 22:18:09 GMT [26719] dbg: sha1: verification wanted: 200906100942 [26719] dbg: sha1: verification result: 707c3d6c1c90992e054829938349803790408c60 channel: SHA1 verification failed, channel failed [26719] dbg: generic: cleaning up temporary directory/files [26719] dbg: diag: updates complete, exiting with code 4 Kind regards, --Toni++
Re: SA-Update - SHA1 Verification failed
I only run sa-update once per day and the last two days it has failed
with a SHA1 verification error.
[2208] dbg: channel: reading MIRRORED.BY file
[2208] dbg: channel: found mirror
http://daryl.dostech.ca/sa-update/sare/90_2tld.cf/
[2208] dbg: channel: found mirror
http://updates.sa-update.com/sare/90_2tld.cf/
[2208] dbg: channel: selected mirror
http://updates.sa-update.com/sare/90_2tld.cf
It is selecting a bad mirror. The domain expired recently. :-/
channel: SHA1 verification failed, channel failed
Is this a temporary mirror problem or something I should investigate
further?
As a quick fix, just remove or comment out the bad mirror in all your
MIRRORED.BY files. This should do:
sed -i -e '/^http:\/\/updates.sa-update.com/ s/^/# /' */MIRRORED.BY
--
char *t=\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4;
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;il;i++){ i%8? c=1:
(c=*++x); c128 (s+=h); if (!(h=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
Re: SA-Update - SHA1 Verification failed
On Wed, 2009-08-19 at 13:21 +0200, Karsten Bräckelmann wrote: I only run sa-update once per day and the last two days it has failed with a SHA1 verification error. [2208] dbg: channel: reading MIRRORED.BY file [2208] dbg: channel: found mirror http://daryl.dostech.ca/sa-update/sare/90_2tld.cf/ [2208] dbg: channel: found mirror http://updates.sa-update.com/sare/90_2tld.cf/ [2208] dbg: channel: selected mirror http://updates.sa-update.com/sare/90_2tld.cf It is selecting a bad mirror. The domain expired recently. :-/ channel: SHA1 verification failed, channel failed Is this a temporary mirror problem or something I should investigate further? As a quick fix, just remove or comment out the bad mirror in all your MIRRORED.BY files. This should do: sed -i -e '/^http:\/\/updates.sa-update.com/ s/^/# /' */MIRRORED.BY Thanks Karsten, That did the trick... BTW - What is the long fix? Are those MIRRORED.BY files auto-generated somehow or will I have to re-edit them again at some time in the future?... Thanks again! Mark signature.asc Description: This is a digitally signed message part
Re: SA-Update - SHA1 Verification failed
On Wed, 2009-08-19 at 12:55 +0100, Arthur Dent wrote:
On Wed, 2009-08-19 at 13:21 +0200, Karsten Bräckelmann wrote:
It is selecting a bad mirror. The domain expired recently. :-/
As a quick fix, just remove or comment out the bad mirror in all your
MIRRORED.BY files. This should do:
sed -i -e '/^http:\/\/updates.sa-update.com/ s/^/# /' */MIRRORED.BY
Thanks Karsten, That did the trick...
BTW - What is the long fix? Are those MIRRORED.BY files auto-generated
somehow or will I have to re-edit them again at some time in the
future?...
You're welcome.
The long fix would be bug 6083 [1], and of course to fix the MIRRORED.BY
files on the servers. Reactivating the expired domain would heal all
this, but not fix the underlying issue, FWIW.
You should not need to re-edit them again, unless you update SA or add
new channels affected by the same issue.
guenther -- don't forget about the nick ;)
[1] https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6083
--
char *t=\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4;
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;il;i++){ i%8? c=1:
(c=*++x); c128 (s+=h); if (!(h=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
