Skip Menu |

This queue is for tickets about the Travel-Routing-DE-VRR CPAN distribution.

Report information
The Basics
Id: 71344
Status: resolved
Priority: 0/
Queue: Travel-Routing-DE-VRR

People
Owner: DERF [...] cpan.org
Requestors: tove [...] gentoo.org
Cc:
AdminCc:

Bug Information
Severity: (no value)
Broken in: (no value)
Fixed in: (no value)



Subject: SIGNATURE mismatch
Date: Thu, 29 Sep 2011 21:32:25 +0200
To: bug-Travel-Routing-DE-VRR [...] rt.cpan.org
From: Torsten Veller <tove [...] gentoo.org>
Travel-Routing-DE-VRR-1.06 comes with a broken SIGNATURE file. If you need any further input (files) please ask. Thanks --- SIGNATURE 2011-09-17 21:48:43.000000000 +0200 +++ - 2011-09-29 21:27:09.994554956 +0200 @@ -29,14 +29,14 @@ SHA1 3adfc7da6082f15051da7fbda884723388738b61 t/01-compile-pl.t SHA1 fd251ffc56ca6e52020c906b61158f78b035679d t/10-pod.t SHA1 5cde4ac432254478c2b0e23731dfa3e7623cdc37 t/20-vrr.t -SHA1 03c61137db01ab6c66d6d57c6de800033e8f2966 t/in/ambiguous -SHA1 b090ebff2ae34df32f307c0a3cd5b90b7140044a t/in/e_hbf_b_hbf.ice -SHA1 2653e00afa657bcaa7983046856314b3dfd2f485 t/in/e_hbf_du_hbf.ice -SHA1 90fb6ff0cfe39ec7a4ed7eec2c48c62ca21a637c t/in/e_hbf_mh_hbf -SHA1 45c2836cb02fda0befc7c014aa1e91fd849f08c7 t/in/e_martinstr_e_florastr -SHA1 ae32311fc3fcc472bc8e8d859c334863c0e2b0ce t/in/e_werden_e_hbf -SHA1 17b18a70d24e307826c7701b6ed38bb9e470de5c t/in/invalid_input -SHA1 4b671309c970bc1c0ea0d9dd2f4094df1b246c86 t/in/no_connections +SHA1 97c03a431f90e27486bfb44c20673749b2351859 t/in/ambiguous +SHA1 7f35c23bf3fb3244f8d1f4049a8688dbfda31732 t/in/e_hbf_b_hbf.ice +SHA1 fd2824486060e6d9b76dd979f104a49fc9cea52f t/in/e_hbf_du_hbf.ice +SHA1 d66b7b07dfd032ec0bb0915ffe1b631a1f52d344 t/in/e_hbf_mh_hbf +SHA1 e1e038c155c62c85d93e8806635e99c4dbde33f9 t/in/e_martinstr_e_florastr +SHA1 b40609abb4950757ab0ee1b4e46499495c7dfbc0 t/in/e_werden_e_hbf +SHA1 c63ff6c4511e7f5109884a8a9e8a6c38993bd6f6 t/in/invalid_input +SHA1 ba15cd41333e6d3a91cc12ed21678ee7045f6147 t/in/no_connections SHA1 750c1b500bc0bf95c83b83670646624c8d97693a t/out/e_hbf_b_hbf.ice SHA1 368485420399cdc7b724f815e1a8790eeb3a4b70 t/out/e_hbf_b_hbf.ice.ignore_all SHA1 3c10463afe1249175c480148af33c6b8f0f321f3 t/out/e_hbf_du_hbf.ice ==> MISMATCHED content between SIGNATURE and distribution files! <==
Hm, I can't reproduce that here. I just downloaded http://search.cpan.org/CPAN/authors/id/D/DE/DERF/Travel-Routing-DE-VRR- 1.06.tar.gz, unpacked it, and according to cpansign -v all hash sums are correct. What exactly did you do?
From: tove [...] gentoo.org
Am Do 29. Sep 2011, 17:01:38, DERF schrieb: Show quoted text
> Hm, I can't reproduce that here. > I just downloaded > http://search.cpan.org/CPAN/authors/id/D/DE/DERF/Travel-Routing-DE-VRR- > 1.06.tar.gz, unpacked it, and according to cpansign -v all hash sums are > correct. > > What exactly did you do?
I just tried it again and attach one of the files: +arkane:~/tmp/cdt.0J5IxLF4% wget http://search.cpan.org/CPAN/authors/id/D/DE/DERF/Travel-Routing-DE- VRR-1.06.tar.gz --2011-09-30 05:43:39-- http://search.cpan.org/CPAN/authors/id/D/DE/DERF/Travel-Routing-DE-VRR- 1.06.tar.gz Resolving search.cpan.org (search.cpan.org)... 194.106.223.155 Connecting to search.cpan.org (search.cpan.org)|194.106.223.155|:80... connected. HTTP request sent, awaiting response... 302 Found Location: http://dl.ambiweb.de/mirrors/ftp.cpan.org/authors/id/D/DE/DERF/Travel-Routing-DE-VRR- 1.06.tar.gz [following] --2011-09-30 05:43:40-- http://dl.ambiweb.de/mirrors/ftp.cpan.org/authors/id/D/DE/DERF/Travel- Routing-DE-VRR-1.06.tar.gz Resolving dl.ambiweb.de (dl.ambiweb.de)... 83.169.47.81 Connecting to dl.ambiweb.de (dl.ambiweb.de)|83.169.47.81|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 71952 (70K) [application/octet-stream] Saving to: `Travel-Routing-DE-VRR-1.06.tar.gz' 100%[===============================================================>] 71,952 326K/s in 0.2s 2011-09-30 05:43:40 (326 KB/s) - `Travel-Routing-DE-VRR-1.06.tar.gz' saved [71952/71952] +arkane:~/tmp/cdt.0J5IxLF4% tar xzf Travel-Routing-DE-VRR-1.06.tar.gz #10053 +arkane:~/tmp/cdt.0J5IxLF4% cpansign -v #10054 ==> MISSING Signature file! <== +arkane:~/tmp/cdt.0J5IxLF4% cd Travel-Routing-DE-VRR-1.06 #255,10055 total 40 drwx------ 2 tove tove 4096 Sep 17 21:48 bin drwx------ 3 tove tove 4096 Sep 17 21:48 lib drwx------ 3 tove tove 4096 Sep 17 21:48 provides drwx------ 4 tove tove 4096 Sep 17 21:48 t -r--r--r-- 1 tove tove 475 Sep 17 21:48 Build.PL -r--r--r-- 1 tove tove 2617 Sep 17 21:48 Changelog -r--r--r-- 1 tove tove 687 Sep 17 21:48 MANIFEST -r--r--r-- 1 tove tove 916 Sep 17 21:48 META.yml -r--r--r-- 1 tove tove 504 Sep 17 21:48 README -rw------- 1 tove tove 3377 Sep 17 21:48 SIGNATURE +arkane:~/tmp/cdt.0J5IxLF4/Travel-Routing-DE-VRR-1.06% cpansign -v #10056 Executing gpg --verify --batch --no-tty --keyserver=hkp://pool.sks-keyservers.net:11371 --keyserver- options=auto-key-retrieve SIGNATURE gpg: Signature made Sat Sep 17 21:48:39 2011 CEST using RSA key ID 5166E005 gpg: requesting key 5166E005 from hkp server pool.sks-keyservers.net gpg: key 5166E005: public key "Daniel Friesel <derf@finalrewind.org>" imported gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model gpg: depth: 0 valid: 2 signed: 15 trust: 0-, 0q, 0n, 0m, 0f, 2u gpg: depth: 1 valid: 15 signed: 44 trust: 0-, 1q, 0n, 14m, 0f, 0u gpg: depth: 2 valid: 5 signed: 29 trust: 0-, 0q, 0n, 5m, 0f, 0u gpg: depth: 3 valid: 4 signed: 20 trust: 0-, 0q, 0n, 4m, 0f, 0u gpg: depth: 4 valid: 3 signed: 8 trust: 0-, 0q, 0n, 3m, 0f, 0u gpg: Total number processed: 1 gpg: imported: 1 (RSA: 1) gpg: Good signature from "Daniel Friesel <derf@finalrewind.org>" gpg: aka "Daniel Friesel (GMX) <daniel@friesel.name>" gpg: aka "Daniel Friesel (Chaosdorf) <derf@chaosdorf.de>" gpg: aka "Daniel Friesel (Jabber) <derf@tabularazor.org>" gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: 781B B707 1C6B F648 EAEB 08A1 100D 5BFB 5166 E005 --- SIGNATURE Sat Sep 17 21:48:43 2011 +++ (current) Fri Sep 30 05:44:02 2011 @@ -13,14 +13,14 @@ SHA1 3adfc7da6082f15051da7fbda884723388738b61 t/01-compile-pl.t SHA1 fd251ffc56ca6e52020c906b61158f78b035679d t/10-pod.t SHA1 5cde4ac432254478c2b0e23731dfa3e7623cdc37 t/20-vrr.t -SHA1 03c61137db01ab6c66d6d57c6de800033e8f2966 t/in/ambiguous -SHA1 b090ebff2ae34df32f307c0a3cd5b90b7140044a t/in/e_hbf_b_hbf.ice -SHA1 2653e00afa657bcaa7983046856314b3dfd2f485 t/in/e_hbf_du_hbf.ice -SHA1 90fb6ff0cfe39ec7a4ed7eec2c48c62ca21a637c t/in/e_hbf_mh_hbf -SHA1 45c2836cb02fda0befc7c014aa1e91fd849f08c7 t/in/e_martinstr_e_florastr -SHA1 ae32311fc3fcc472bc8e8d859c334863c0e2b0ce t/in/e_werden_e_hbf -SHA1 17b18a70d24e307826c7701b6ed38bb9e470de5c t/in/invalid_input -SHA1 4b671309c970bc1c0ea0d9dd2f4094df1b246c86 t/in/no_connections +SHA1 97c03a431f90e27486bfb44c20673749b2351859 t/in/ambiguous +SHA1 7f35c23bf3fb3244f8d1f4049a8688dbfda31732 t/in/e_hbf_b_hbf.ice +SHA1 fd2824486060e6d9b76dd979f104a49fc9cea52f t/in/e_hbf_du_hbf.ice +SHA1 d66b7b07dfd032ec0bb0915ffe1b631a1f52d344 t/in/e_hbf_mh_hbf +SHA1 e1e038c155c62c85d93e8806635e99c4dbde33f9 t/in/e_martinstr_e_florastr +SHA1 b40609abb4950757ab0ee1b4e46499495c7dfbc0 t/in/e_werden_e_hbf +SHA1 c63ff6c4511e7f5109884a8a9e8a6c38993bd6f6 t/in/invalid_input +SHA1 ba15cd41333e6d3a91cc12ed21678ee7045f6147 t/in/no_connections SHA1 750c1b500bc0bf95c83b83670646624c8d97693a t/out/e_hbf_b_hbf.ice SHA1 368485420399cdc7b724f815e1a8790eeb3a4b70 t/out/e_hbf_b_hbf.ice.ignore_all SHA1 3c10463afe1249175c480148af33c6b8f0f321f3 t/out/e_hbf_du_hbf.ice ==> MISMATCHED content between SIGNATURE and distribution files! <==
Subject: ambiguous
Download ambiguous
application/octet-stream 38.8k

Message body not shown because it is not plain text.

From: tove [...] gentoo.org
Upgrading from Module-Signature-0.66 to 0.68 fixed it. The signature is fine and sha1sum also reported the correct hash. Thanks
Marking this ticket as resolved (sorry for the late reaction)