Wrong Digest error

Strange I didn’t get this error. My mirrors are Kent in UK.

I just did refresh again now 13.14hrs UK. Still working fine for me.

Mine to caf(Though last was oxford) guess they have a better sync policy. Without someone posting some info won’t know.

But if I was to guess I reckon as they updated the master, some mirrors where syncing.

Though the rpm seems strange as I downloaded it to check the sum. But it doesn’t seemed to of changed since being released the date is 03-Dec-2008 18:31.

I can only guess that perhaps one of the metadata files was wrong at some point.

Either that or it has been updated and we’re waiting for it to sync

It’s OK now. Refresh your repositories and grab the latest icon theme! :wink:

Well I cant gunzip primary.xml.gz, as seen in the quote below it errors.

I checked the sha1sum of primary.xml.gz against the one in repmond.xml and they match.

I am being redircted to mirror.pacific.net.au

Sorry for the lag in updates, work keeps me pretty busy.

I am going to try an update now, will post back with results.

mem@linux-682p:~/working> wget http://download.opensuse.org/distribution/11.1/repo/oss/suse/repodata/repomd.xml                                                                                                           
--2009-04-29 13:27:20--  http://download.opensuse.org/distribution/11.1/repo/oss/suse/repodata/repomd.xml    
Resolving download.opensuse.org... 195.135.221.130                                                           
Connecting to download.opensuse.org|195.135.221.130|:80... connected.                                        
HTTP request sent, awaiting response... 200 OK                                                               
Length: 951 [text/xml]                                                                                       
Saving to: `repomd.xml'

100%===================================================================>] 951         --.-K/s   in 0s

2009-04-29 13:27:21 (66.9 MB/s) - `repomd.xml' saved [951/951]

mem@linux-682p:~/working> wget -c http://download.opensuse.org/distribution/11.1/repo/oss/suse/repodata/primary.xml.gz
--2009-04-29 13:27:39--  http://download.opensuse.org/distribution/11.1/repo/oss/suse/repodata/primary.xml.gz
Resolving download.opensuse.org... 195.135.221.130
Connecting to download.opensuse.org|195.135.221.130|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://mirror.pacific.net.au/linux/opensuse/distribution/11.1/repo/oss/suse/repodata/primary.xml.gz [following]
--2009-04-29 13:27:40--  http://mirror.pacific.net.au/linux/opensuse/distribution/11.1/repo/oss/suse/repodata/primary.xml.gz
Resolving mirror.pacific.net.au... 61.8.0.17
Connecting to mirror.pacific.net.au|61.8.0.17|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 4731369 (4.5M) [text/xml]
Saving to: `primary.xml.gz'

100%===================================================================>] 4,731,369   35.4K/s   in 1m 58s

2009-04-29 13:29:55 (39.3 KB/s) - `primary.xml.gz' saved [4731369/4731369]

mem@linux-682p:~/working> sha1sum primary.xml.gz
6d992ec6b2797cdf4bfe4a61bec683d067577612  primary.xml.gz
mem@linux-682p:~/working> gunzip primary.xml.gz

gzip: primary.xml.gz: invalid compressed data--crc error

Well still getting the same error:
http://i42.tinypic.com/2hzjzav.png

Im going to try not using the download.opensuse.org mirror and pick another one. Hopefully its just the Australian mirror, I have had similar issues with other au mirrors for linux distributions. iinet have a habit of letting their mirror for .debs get up to 6 months out of sync.

http://i41.tinypic.com/do1n5i.png

I swapped to the mirror Index of /opensuse for updates, oss and non-oss. Unfortunately I still get a wrong digest error.

So having tried all, can someone please provide me with a method to test this manually. I still suspect all issues lie with my proxy provider who insist its not their issue (just like any good ISP helpdesk).

Are you tried to refresh your repositories?


sudo zypper refresh

Tried, no difference

mem@linux-682p:~/working> sudo zypper refresh
root’s password:
System management is locked by the application with pid 31390 (/usr/lib/YaST2/bin/y2base).
Close this application before trying again.
mem@linux-682p:~/working> sudo zypper refresh
Retrieving repository ‘11.1’ metadata [done]
Building repository ‘11.1’ cache [done]
Repository ‘openSUSE-NonOSS-Add-on 11.1-0’ is up to date.
All repositories have been refreshed.

Tried Yast2, “Software Repositories” and get the same digest error.

Still hoping someone can break down the yast method so I can manually test and identify where it is failing.

From what I can work out…

Secure Installation Sources - openSUSE

You’re checking against http://mirror.nyi.net/opensuse/distribution/11.1/repo/oss/content now this has the checksum in it, as returned by your machine.

In my limited opinion you seem to be checking against some kind of content that is wrong. I would of expected you to see corruption elsewhere if proxy, i.e manual download of rpm.

I don’t know where Suse stores this file or even if it does, but to me it looks like it isn’t getting newer files. Though you seem to of solved it with zypper.

To me you don’t have a problem with the proxy, otherwise the file would be corrupt. Even when it errors it errors with the correct checksum, but the sum it is checking against is wrong. Now as to why the sum is wrong I haven’t got a clue it’s like you have an old cache or something. As the one on the repos adds up fine i.e package.gz with content from failing mirror.

Edit
Perhaps something is being cached by the proxy and not being requested as new, wild out there idea maybe.

In my limited opinion you seem to be checking against some kind of content that is wrong. I would of expected you to see corruption elsewhere if proxy, i.e manual download of rpm.

You mean like I clearly stated in my 1st post ?

running rpm --checksig on an rpm downloaded via download.opensuse.org fails.

Here is another example:

mem@linux-682p:~/working> wget -c http://mirror.nyi.net/opensuse/update/11.1/rpm/noarch/kernel-docs-2.6.3-3.13.13.noarch.rpm
--2009-04-30 10:28:08--  http://mirror.nyi.net/opensuse/update/11.1/rpm/noarch/kernel-docs-2.6.3-3.13.13.noarch.rpm
Resolving mirror.nyi.net... 64.90.181.77
Connecting to mirror.nyi.net|64.90.181.77|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 9112364 (8.7M) [text/plain]
Saving to: `kernel-docs-2.6.3-3.13.13.noarch.rpm'

100%===================================================================>] 9,112,364   95.9K/s   in 92s

2009-04-30 10:29:40 (96.9 KB/s) - `kernel-docs-2.6.3-3.13.13.noarch.rpm' saved [9112364/9112364]

mem@linux-682p:~/working> rpm --checksig kernel-docs-2.6.3-3.13.13.noarch.rpm
kernel-docs-2.6.3-3.13.13.noarch.rpm: rsa sha1 MD5 PGP MD5 NOT OK
mem@linux-682p:~/working>

If someone could download the rpm, do a --checksig as well it may be enough to prove the proxy is corrupting the downloads.

Hi
Here you go, works fine for me.


malcolml@mizz-piggy:~$ wget -c
http://mirror.nyi.net/opensuse/update/11.1/rpm/noarch/kernel-docs-2.6.3-3.13.13.noarch.rpm
--2009-04-29 21:43:24--
http://mirror.nyi.net/opensuse/update/11.1/rpm/noarch/kernel-docs-2.6.3-3.13.13.noarch.rpm
Resolving mirror.nyi.net... 64.90.181.77 Connecting to
mirror.nyi.net|64.90.181.77|:80... connected. HTTP request sent,
awaiting response... 200 OK Length: 9112364 (8.7M) [text/plain] Saving
to: `kernel-docs-2.6.3-3.13.13.noarch.rpm'

100%======================================>] 9,112,364    202K/s   in
41s

2009-04-29 21:44:06 (219 KB/s) - `kernel-docs-2.6.3-3.13.13.noarch.rpm'
saved [9112364/9112364]

malcolml@mizz-piggy:~$ rpm --checksig
kernel-docs-2.6.3-3.13.13.noarch.rpm
kernel-docs-2.6.3-3.13.13.noarch.rpm: rsa sha1 (md5) pgp md5 OK
malcolml@mizz-piggy:~$


Cheers Malcolm °¿° (Linux Counter #276890)
openSUSE 11.1 (i586) Kernel 2.6.27.21-0.1-pae
up 15:17, 2 users, load average: 0.05, 0.25, 0.36
ASUS eeePC 1000HE ATOM N280 1.66GHz | GPU Mobile 945GM/GMS/GME

Thankyou very much mate,
I shall take the server home tonight, repeat the test and post results.

My coworker opened a direct gateway to the internet for me to test.

Unfortunately, it still errors. Is it possible a dodgey cd could be the cause of this ?. We only have 1 set of cdr’s here and they r a cheap brand.

I shall reburn the iso and test tonight either way.

linux-682p:~ # rpmdb --rebuilddb                             
error: rpmdbAdd: skipping h#      76 Header V3 RSA/SHA256 signature: BAD, key ID 3dbdc284
error: rpmdbAdd: skipping h#      99 Header V3 RSA/SHA256 signature: BAD, key ID 3dbdc284
error: rpmdbNextIterator: skipping h#     945 Header V3 RSA/SHA256 signature: BAD, key ID 3dbdc284
error: rpmdbAdd: skipping h#     166 Header V3 RSA/SHA256 signature: BAD, key ID 3dbdc284         
error: rpmdbNextIterator: skipping h#     389 Header V3 RSA/SHA256 signature: BAD, key ID 3dbdc284
error: rpmdbNextIterator: skipping h#     576 Header V3 RSA/SHA256 signature: BAD, key ID 3dbdc284
error: rpmdbAdd: skipping h#     493 Header V3 RSA/SHA256 signature: BAD, key ID 3dbdc284         
error: rpmdbNextIterator: skipping h#     490 Header V3 RSA/SHA256 signature: BAD, key ID 3dbdc284
error: rpmdbAdd: skipping h#     734 Header V3 RSA/SHA256 signature: BAD, key ID 3dbdc284         
error: rpmdbNextIterator: skipping h#     343 Header V3 RSA/SHA256 signature: BAD, key ID 3dbdc284
error: rpmdbAdd: skipping h#     938 Header V3 RSA/SHA256 signature: BAD, key ID 3dbdc284         
linux-682p:~ # zypper ref                                                                         
Repository '11.1' is up to date.                                                                  
Repository 'openSUSE-NonOSS-Add-on 11.1-0' is up to date.                                         
Repository 'openSUSE 11.1-0' is up to date.                                                       
All repositories have been refreshed.                                                             
linux-682p:~ # zypper up                                                                          
Loading repository data...                                                                        
Reading installed packages...                                                                     

The following packages are going to be upgraded:
--SNIP--
etrieving package bundle-lang-gnome-en-11.1-11.3.noarch (1/192), 9.7 M (17.7 M unpacked)
Retrieving: bundle-lang-gnome-en-11.1-11.3.noarch.rpm [done (77.5 K/s)]
Digest verification failed for bundle-lang-gnome-en-11.1-11.3.noarch.rpm. Expected b85b6ea393c8657a11df981a4ca5270d2065f26f, found 5f64284ad77796d30224eab25b504780e2dc5492. Continue? [yes/NO]:

One way or another your system seems corrupted. I’ve tested lots and lots to see if I could force my laptop to have your problem, just can’t. If I was in your shoes, I’d reinstall from scratch.

Err where…

sha1sum oxygen-icon-theme-scalable-4.1.3-4.1.noarch.rpm
22fb55caa6ece63dda041c86f739880d09a4ac7c oxygen-icon-theme-scalable-4.1.3-4.1.noarch.rpm

Your first post…
http://i41.tinypic.com/2rhxqon.png

Those sums look fine exactly the same, what isn’t right is the sum you’re checking against.(but the current checksum is …)

Which is what I said in my last post.

I’m getting this error as well though with a different package. I haven’t done any updates in over two weeks and just tried today.

Retrieving repository 'Packman Repository' metadata [done]
Building repository 'Packman Repository' cache [done]
Repository 'openSUSE-11.1-Debug' is up to date.
Repository 'openSUSE-11.1-Non-Oss' is up to date.
Repository 'openSUSE-11.1-Oss' is up to date.
Digest verification failed for packages.DU.gz. Expected c2c47b2bea12224005074a4a1dff2abb66ec28f0, found 0e90c879133dc4ac7b63acd021c0969cc24d00e6. Continue? [yes/NO]: n
Retrieving repository 'openSUSE-11.1-Source' metadata [error]
Repository 'openSUSE-11.1-Source' is invalid.
packages.DU.gz has wrong checksum
Please check if the URIs defined for this repository are pointing to a valid repository.
Skipping repository 'openSUSE-11.1-Source' because of the above error.

I don’t want to have to re-install since I’m using dial up and have some of the recent updates and patches installed, and don’t want to download them again.

Will try caf4926’s suggestion, or maybe wait a week and try refreshing again. :\

Another small hurdle cleared. Thanks to caf4926’s suggestions, I no longer get the error. I also read over the link about repository management and decided to delete source, as I don’t need it, though it came with default install of 11.1 for 64 bit computer.