Skip Menu |

This queue is for tickets about the Digest-SHA CPAN distribution.

Report information
The Basics
Id: 14273
Status: resolved
Worked: 30 min
Priority: 0/
Queue: Digest-SHA
People
Owner: Nobody in particular
Requestors: rrwo [...] cpan.org
Cc:
AdminCc:
Bug Information
Severity: Important
Broken in: 5.30
Fixed in: (no value)

History Show all quoted text
  Mon Aug 22 22:16:54 2005 Guest - Ticket created
Subject: Bad SIGNATURE file
The SIGNATURE is bad: --- SIGNATURE Sun Aug 21 00:47:04 2005 +++ (current) Tue Aug 23 03:15:39 2005 @@ -40,11 +40,11 @@ SHA1 636d5e987243f6634fdc1dff1fe1d11d07778347 t/gillogly/state.011 SHA1 b1e86af6b46e066555bbcd749982ccba816cf744 t/gillogly/state.110 SHA1 427874bceb58bc3a36b5808a204023334614930b t/nist/COPYRIGHT -SHA1 573d7d4bba50c5cecb4a86f1ffff14d764a31ecb t/nist/Readme.txt -SHA1 7996bb1a434fb3f6fd38f64800ab3b2fe5d23c6b t/nist/bit-hashes.sha1 -SHA1 d21096373dfbf3330d89bcb2e704b543a27b6065 t/nist/bit-messages.sha1 -SHA1 dd66fe858830fb1b23d35affa402b52a77a15b1f t/nist/byte-hashes.sha1 -SHA1 936304c2db3a3ee49ecb1247f8466814cab080a0 t/nist/byte-messages.sha1 +SHA1 fb62fba7cf3abd4a3f102e3c5d1364885f3fca0c t/nist/Readme.txt +SHA1 1c5e5609f4a68cbaac298d0bbcbc7f56866ac296 t/nist/bit-hashes.sha1 +SHA1 f5d19f0842895dc74ec3f9b1b2bc684088552d8e t/nist/bit-messages.sha1 +SHA1 81cc5e5a0c57de956de3f44977e486afa871068f t/nist/byte-hashes.sha1 +SHA1 505c66bd2326114b05fa96474ff1973e52761137 t/nist/byte-messages.sha1 SHA1 3b51b03c790b1cf112d4804573f5fd4814b384c2 t/state/state.1 SHA1 cc3d0feffc019e4651fb085e7bc51e190e58fa53 t/state/state.256 SHA1 2130ee8086bc7bf41fc329e9d87a81e2d98b68c8 t/state/state.384 ==> MISMATCHED content between SIGNATURE and distribution files! <== [ERROR] Signature check failed for module 'Digest::SHA' -- Not trusting this mod ule, aborting install Error installing 'Digest::SHA' Problem installing one or more modules
  Tue Aug 23 04:41:38 2005 mshelor [...] cpan.org - Status changed from 'new' to 'resolved'
  Tue Aug 23 04:41:38 2005 mshelor [...] cpan.org - Correspondence added 30 min
RT-Send-CC: autrijus [...] autrijus.org
Even though Module::Signature is reporting the files in the "nist" subdirectory as having incorrect SHA1 hashes, the values are actually correct. This is a problem with Module::Signature, which produces inconsistent hashes between Unix and Windows for text files containing embedded ^M characters. If you run the command "shasum -b t/nist/Readme.txt" on your Windows system, you'll get the correct value in the SIGNATURE file, namely, 573d7d4bba50c5cecb4a86f1ffff14d764a31ecb The culprit in Module::Signature (v. 0.50) appears to be line 798: binmode(F) if -B $file; Since "Readme.txt" is a text file, the -B test fails and text mode is selected by default on Windows systems. Hence, the inconsistent values. Regards, Mark