Message "Wrong Digest" in zypper

English Install/Boot/Login
1

zypper up

Retrieving repository ‘Debug Updates 13.2’ metadata ----------------------------------------------------------------------------------------------------]

Warning: Digest verification failed for file ‘b027d11dc11d6e216f08197182aa6cf4e275c19b42a63db497362b43c4b3b7ac-appdata.xml.gz’
[/var/cache/zypp/raw/Dupu_Updates_13.2SDo2H8/repodata/b027d11dc11d6e216f08197182aa6cf4e275c19b42a63db497362b43c4b3b7ac-appdata.xml.gz]

expected 898c1fc60f2e5b255a35d0654935ec36f1f5bee5afef63a141e932f0703c46a9
but got 4fcc9e2e4f6fdd71c6d08479ab2a863eb097deea14dee29cee78224d41307a54

Accepting packages with wrong checksums can lead to a corrupted system and in extreme cases even to a system compromise.

However if you made certain that the file with checksum ‘4fcc…’ is secure, correct
and should be used within this operation, enter the first 4 characters of the checksum
to unblock using this file on your own risk. Empty input will discard the file.

In Yast2 a second message:

There was an error in the repository initialization.
[Dupu_Updates_13.2|http://download.opensuse.org/debug/update/13.2/] Valid metadata not found at specified URL
History:

  • b027d11dc11d6e216f08197182aa6cf4e275c19b42a63db497362b43c4b3b7ac-appdata.xml.gz has wrong checksum

I will not do any update until this message goes away.

2

Why not just disable the debug-update repo?
You don’t need it anyway, unless you want to debug crashes.

Oh, and it only contains debug information for the packages in the update repo. Unlikely that a hacked repo could do anything to your system… :wink:

3

I occasionally see similar messages. It recently happened in Tumbleweed.

When that happens, I cancel out. Then I wait a few hours and try again. And usually all is fine at that time.

I think (ok, make that “guess”) it is due to using a mirror that is being updated while you are using it.

4

Okay. Disabled the debug repo, runs fine.