Uploaded image for project: 'Commons Compress'
  1. Commons Compress
  2. COMPRESS-80

wrong checksum for maven artifacts in repository

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 1.0
    • 1.0
    • None
    • None

    Description

      The central repository contains wrong checksums for the compress-1.0 artifacts. This will cause many company repositories to ignore these artifacts. The following is logged when doing for examle mvn dependency:tree on tika trunk:

      [WARNING] *** CHECKSUM FAILED - Checksum failed on download: local = '325980a09dbbd0c108ece8e7733b462b00e6f2a8'; remote
      = 'commons-compress-1.0.pom:' - RETRYING
      Downloading: http://repo1.maven.org/maven2/org/apache/commons/commons-compress/1.0/commons-compress-1.0.pom
      7K downloaded
      [WARNING] *** CHECKSUM FAILED - Checksum failed on download: local = '325980a09dbbd0c108ece8e7733b462b00e6f2a8'; remote
      = 'commons-compress-1.0.pom:' - IGNORING
      [INFO] snapshot org.apache.tika:tika-core:0.4-SNAPSHOT: checking for updates from libs-snapshots
      Downloading: http://[company repo]/libs-releases/org/apache/commons/commons-compress/1.0/commons-compress-1.0.jar

      Downloading: http://[company repo]/ext-releases/org/apache/commons/commons-compress/1.0/commons-compress-1.0.jar
      Downloading: http://repo1.maven.org/maven2/org/apache/commons/commons-compress/1.0/commons-compress-1.0.jar
      140K downloaded
      [WARNING] *** CHECKSUM FAILED - Checksum failed on download: local = '995ae384a0b1e2c66269e6bc5198db8561fb45a2'; remote
      = 'commons-compress-1.0.jar:' - RETRYING
      Downloading: http://repo1.maven.org/maven2/org/apache/commons/commons-compress/1.0/commons-compress-1.0.jar
      140K downloaded
      [WARNING] *** CHECKSUM FAILED - Checksum failed on download: local = '995ae384a0b1e2c66269e6bc5198db8561fb45a2'; remote
      = 'commons-compress-1.0.jar:' - IGNORING

      Attachments

        Activity

          grobmeier Christian Grobmeier added a comment - - edited

          This script checks MD5 on the dist directories, here the checksums looks good:
          http://people.apache.org/~henkp/checker/md5.html
          (this actually works for commons compress too)

          Is this a problem with sync to m1 repo?

          grobmeier Christian Grobmeier added a comment - - edited This script checks MD5 on the dist directories, here the checksums looks good: http://people.apache.org/~henkp/checker/md5.html (this actually works for commons compress too) Is this a problem with sync to m1 repo?
          grobmeier Christian Grobmeier added a comment - - edited

          Just saw, that the MD5 checksum on m1 repo is different to the dist folders. This is cause, md5 was wrong and infrastructure told me to regenerate. I did, but replication to m repo seems to fail. I'll ask the infra guy on it.

          grobmeier Christian Grobmeier added a comment - - edited Just saw, that the MD5 checksum on m1 repo is different to the dist folders. This is cause, md5 was wrong and infrastructure told me to regenerate. I did, but replication to m repo seems to fail. I'll ask the infra guy on it.
          grobmeier Christian Grobmeier added a comment - - edited

          The MD5 and SHA1 files have been resynced - everything should work correctly now.

          grobmeier Christian Grobmeier added a comment - - edited The MD5 and SHA1 files have been resynced - everything should work correctly now.
          aaronkaplan Aaron Kaplan added a comment -

          The checksum for commons-compress-1.0.jar is ok, but those of commons-compress-1.0-sources.jar and commons-compress-1.0-javadoc.jar are still wrong.

          aaronkaplan Aaron Kaplan added a comment - The checksum for commons-compress-1.0.jar is ok, but those of commons-compress-1.0-sources.jar and commons-compress-1.0-javadoc.jar are still wrong.
          dlouzado Dario Louzado added a comment -

          The problem still persists, even for commons-compress-1.0.jar file. Here is my Artifactory log:

          org.artifactory.io.checksum.policy.ChecksumPolicyException: Checksum policy 'GEN_IF_ABSENT' rejected the artifact 'commons-compress-1.0.jar'. Checksums info: [ChecksumInfo

          {type=MD5, original='commons-compress-1.0.jar:', actual='0bbe31402b267ec6f54e06edcd8f06cf'}

          , ChecksumInfo

          {type=SHA-1, original='commons-compress-1.0.jar:', actual='995ae384a0b1e2c66269e6bc5198db8561fb45a2'}

          ]

          dlouzado Dario Louzado added a comment - The problem still persists, even for commons-compress-1.0.jar file. Here is my Artifactory log: org.artifactory.io.checksum.policy.ChecksumPolicyException: Checksum policy 'GEN_IF_ABSENT' rejected the artifact 'commons-compress-1.0.jar'. Checksums info: [ChecksumInfo {type=MD5, original='commons-compress-1.0.jar:', actual='0bbe31402b267ec6f54e06edcd8f06cf'} , ChecksumInfo {type=SHA-1, original='commons-compress-1.0.jar:', actual='995ae384a0b1e2c66269e6bc5198db8561fb45a2'} ]
          sebb Sebb added a comment -

          The MD5 and SHA1 hashes are OK, however the format of the files may perhaps be causing a problem.

          For example, commons-compress-1.0.jar.md5 contains:

          commons-compress-1.0.jar: 0B BE 31 40 2B 26 7E C6 F5 4E 06 ED CD 8F 06 CF

          A more usual format is either

          0BBE31402B267EC6F54E06EDCD8F06CF
          or
          0BBE31402B267EC6F54E06EDCD8F06CF *commons-compress-1.0.jar

          Unfortunately, the error message from Artifactory does not say what hash it detected so it's difficult to know if this is the case.

          If you are able to test against Artifactory a local repo, perhaps you could try reformatting the md5 to see if that fixes the problem?

          sebb Sebb added a comment - The MD5 and SHA1 hashes are OK, however the format of the files may perhaps be causing a problem. For example, commons-compress-1.0.jar.md5 contains: commons-compress-1.0.jar: 0B BE 31 40 2B 26 7E C6 F5 4E 06 ED CD 8F 06 CF A more usual format is either 0BBE31402B267EC6F54E06EDCD8F06CF or 0BBE31402B267EC6F54E06EDCD8F06CF *commons-compress-1.0.jar Unfortunately, the error message from Artifactory does not say what hash it detected so it's difficult to know if this is the case. If you are able to test against Artifactory a local repo, perhaps you could try reformatting the md5 to see if that fixes the problem?

          People

            Unassigned Unassigned
            d.de.wit Daan de Wit
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: