Dave, any thoughts?  This is odd!
--
Kevin A. McGrail
Asst. Treasurer & VP Fundraising, Apache Software Foundation
Chair Emeritus Apache SpamAssassin Project
https://www.linkedin.com/in/kmcgrail - 703.798.0171

---------- Forwarded message ----------
From: <bugzilla-dae...@bugzilla.spamassassin.org>
Date: Mon, Mar 19, 2018 at 8:45 AM
Subject: [Bug 7566] "SHA1 verification failed" for sa-update.razx.cloud
since 1-2 weeks
To: d...@spamassassin.apache.org


https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7566

Kevin A. McGrail <kmcgr...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |kmcgr...@apache.org

--- Comment #1 from Kevin A. McGrail <kmcgr...@apache.org> ---
Thanks for the report.

That is a real mirror and that debug is the correct sha1 it is looking for
which it is failing.

Grabbing the file manually, sa-update.razx.cloud/1827131.tar.gz is wrong.

Checking manually: 1f5ebe36fc3f4cf9c87146fc19cfa56f7287fced  1827131.tar.gz

Right:
-rw-r--r-- 1 9997 9997 276361 Mar 18 22:43 1827131.tar.gz

Wrong:
-rw-r--r-- 1 root root 210712 Mar 18 04:31 1827131.tar.gz

Dave, we need to take razx out of the mirror list and identify how they are
getting truncated / corrupted files.

The good news is that our safety valves prevented a bad installation of
rules

Thanks, KAM

--
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to