search

briandfoy / net-ssh-perl

Development on the Net::SSH::Perl module to support latest ciphers, key exchange mechanisms, etc.
Other
4 stars 1 forks source link

bad sha1sums in SIGNATURE file #63

Closed briandfoy closed 1 year ago

briandfoy commented 1 year ago

This ticket was imported from [rt.cpan.org 91840](https://rt.cpan.org/Ticket/Display.html?id= 99284)

Thank you. -Mark

PRD sre@nwa1.ntf.cft1 /tmp/cpan/build/Net-SSH-Perl-1.37
2014-10-02 17:56:59 Thu  PRD $ for file in `grep ^SHA1 SIGNATURE | awk '{ print $3; }'`; do echo "SHA1 `sha1sum $file`" | sed 's/  / /'; done > SIGNATURE.files

PRD sre@nwa1.ntf.cft1 /tmp/cpan/build/Net-SSH-Perl-1.37
2014-10-02 17:57:04 Thu  PRD $ diff -u SIGNATURE SIGNATURE.files
--- SIGNATURE   2013-08-09 15:08:32.000000000 -0700
+++ SIGNATURE.files 2014-10-02 17:57:04.000000000 -0700
@@ -1,25 +1,9 @@
-This file contains message digests of all files listed in MANIFEST,
-signed via the Module::Signature module, version 0.70.
-
-To verify the content in this distribution, first make sure you have
-Module::Signature installed, then type:
-
-    % cpansign -v
-
-It will check each file's integrity, as well as the signature's
-validity.  If "==> Signature verified OK! <==" is not displayed,
-the distribution may already have been compromised, and you should
-not run its Makefile.PL or Build.PL.
-
------BEGIN PGP SIGNED MESSAGE-----
-Hash: SHA1
-
 SHA1 cc451367f759ef30c8200859b4248973a973b623 .perlcriticrc
-SHA1 08fdfcbe9db3d8d0c13a3dc4681001cf2c7247ad Changes
+SHA1 9f148d72ef0d35bec456786b8c633fc7ca471007 Changes
 SHA1 f235ba4160673bcb7c9d58c2f09dbc7fc0efadea LICENSE
 SHA1 d6a61ea9371de92127e4afc234b6f6651535ed1b MANIFEST
 SHA1 84efc47ee3a4253e0ab8029a26c263a6553beda7 MANIFEST.SKIP
-SHA1 378c9d5867b7e8cba6f5576b4593d6303264ee8d META.yml
+SHA1 45ac8bfe9dff80b47d8bdf118fa60f1facdaeb59 META.yml
 SHA1 ed90f5c217f68c08f9fcdeb40870b09e855d704d Makefile.PL
 SHA1 c4f71c29acb966232282d57b570484f7ceef208b README
 SHA1 ca4a01e14284c7a3efa45229e3ba0877ade60285 ToDo
@@ -29,7 +13,7 @@
 SHA1 3a7ecc57b316a02a72f8f56602b6d59aa4a4c2ce eg/pssh-keygen
 SHA1 c36af8adc7bcc9ccbef3beed15723a4a0e8db15a eg/remoteinteract.pl
 SHA1 7ff227ceb0c28c8f98b5772072eb6bf908f96555 eg/remoteinteract2.pl
-SHA1 5cba731f48de8687477d24364851434bf148cf9c lib/Net/SSH/Perl.pm
+SHA1 5880749f094a44ad9b27a2cc592ee6d233ce46bc lib/Net/SSH/Perl.pm
 SHA1 f7b6f7cd52ce138615b0fa1bbd0b965bd138e4e8 lib/Net/SSH/Perl/Agent.pm
 SHA1 42d0e1ae5b5c4f90dfcc8b28076ec94c682174f0 lib/Net/SSH/Perl/Auth.pm
 SHA1 2587036da2cddb5278e84db1cc10d2d2c2cd1029 lib/Net/SSH/Perl/Auth/ChallengeResponse.pm
@@ -54,7 +38,7 @@
 SHA1 0479eae6ae99108e46cc859c2f053845ace7ab7d lib/Net/SSH/Perl/Cipher/RC4.pm
 SHA1 3df4c4dda730c0114f23d80b30a37b33ccefd40c lib/Net/SSH/Perl/Comp.pm
 SHA1 b75708438f4def2fd96fa8e1570ab999b49f7e19 lib/Net/SSH/Perl/Comp/Zlib.pm
-SHA1 61063ffcb55c106e534918585d61950659dc84a9 lib/Net/SSH/Perl/Config.pm
+SHA1 0a287a3f907d3ffeff0e01be6a0553b546869747 lib/Net/SSH/Perl/Config.pm
 SHA1 59160d52f16e23fb362948632d8325ce7dcfc4af lib/Net/SSH/Perl/Constants.pm
 SHA1 921a224def784e988c01395b2634bcb9bdd2cbd9 lib/Net/SSH/Perl/Handle.pm
 SHA1 008d3ebd3a2e5b2ff5a622bba6b3f2286a587948 lib/Net/SSH/Perl/Handle/SSH1.pm
@@ -94,10 +78,3 @@
 SHA1 9a32e630c87d1cc3ceaf2b5585519b55d12b79d3 t/config
 SHA1 885358760910acc3898301c9af18cd634ddd81a8 t/psshd
 SHA1 9b7aa51c0e3a2fede4a7b4767c3d507f37f46696 t/test-common.pl
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1.4.11 (GNU/Linux)
-
-iEYEARECAAYFAlIFaFUACgkQJszQZs1hPJsUVACdH0C4dZaSHdr9Su4wvHkEW81K
-nAcAoIV1jUIA6aDbhob/EKz/VTic1zzD
-=5K3H
------END PGP SIGNATURE-----
Fetching with LWP:
http://cpan.perl.org/authors/id/S/SC/SCHWIGON/Net-SSH-Perl-1.37.tar.gz
Fetching with LWP:
http://cpan.perl.org/authors/id/S/SC/SCHWIGON/CHECKSUMS
WARNING: This key is not certified with a trusted signature!
Primary key fingerprint: 2E66 557A B97C 19C7 91AF  8E20 328D A867 450F 89EC
Signature for /tmp/cpan/sources/authors/id/S/SC/SCHWIGON/CHECKSUMS ok
Checksum for /tmp/cpan/sources/authors/id/S/SC/SCHWIGON/Net-SSH-Perl-1.37.tar.gz ok
Net-SSH-Perl-1.37/
Net-SSH-Perl-1.37/t/
Net-SSH-Perl-1.37/t/05-cipher.t
Net-SSH-Perl-1.37/t/00-signature.t
Net-SSH-Perl-1.37/t/config
Net-SSH-Perl-1.37/t/psshd
Net-SSH-Perl-1.37/t/03-packet.t
Net-SSH-Perl-1.37/t/test-common.pl
Net-SSH-Perl-1.37/t/99-perlcritic.t
Net-SSH-Perl-1.37/t/06-auth.t
Net-SSH-Perl-1.37/t/04-config.t
Net-SSH-Perl-1.37/t/99-pod.t
Net-SSH-Perl-1.37/t/01-compile.t
Net-SSH-Perl-1.37/t/99-yaml.t
Net-SSH-Perl-1.37/t/99-spellcheck.t
Net-SSH-Perl-1.37/t/06-circular.t
Net-SSH-Perl-1.37/t/02-buffer.t
Net-SSH-Perl-1.37/.perlcriticrc
Net-SSH-Perl-1.37/lib/
Net-SSH-Perl-1.37/lib/Net/
Net-SSH-Perl-1.37/lib/Net/SSH/
Net-SSH-Perl-1.37/lib/Net/SSH/Perl.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Kex.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/AuthMgr.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Buffer.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Util.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Agent.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Handle.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/SSH2.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Util/
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Util/Authfile.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Util/Hosts.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Util/SSH1Misc.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Util/RSA.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Util/SSH1MP.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Util/Term.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Util/SSH2MP.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Comp.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Key/
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Key/DSA.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Key/RSA.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Key/RSA1.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Cipher.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Cipher/
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Cipher/RC4.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Cipher/CFB.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Cipher/CBC.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Cipher/DES.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Cipher/DES3.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Cipher/IDEA.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Cipher/Blowfish.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Constants.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/SSH1.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Channel.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Auth/
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Auth/Rhosts.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Auth/RSA.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Auth/PublicKey.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Auth/KeyboardInteractive.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Auth/KeyboardInt.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Auth/ChallengeResponse.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Auth/Password.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Auth/Rhosts_RSA.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Comp/
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Comp/Zlib.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Handle/
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Handle/SSH2.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Handle/SSH1.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Config.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Mac.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Subsystem/
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Subsystem/Server.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Subsystem/Client.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Kex/
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Kex/DH1.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Packet.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/ChannelMgr.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Auth.pm
Net-SSH-Perl-1.37/lib/Net/SSH/Perl/Key.pm
Net-SSH-Perl-1.37/MANIFEST.SKIP
Net-SSH-Perl-1.37/Makefile.PL
Net-SSH-Perl-1.37/LICENSE
Net-SSH-Perl-1.37/META.yml
Net-SSH-Perl-1.37/eg/
Net-SSH-Perl-1.37/eg/pscp
Net-SSH-Perl-1.37/eg/cmd.pl
Net-SSH-Perl-1.37/eg/remoteinteract.pl
Net-SSH-Perl-1.37/eg/remoteinteract2.pl
Net-SSH-Perl-1.37/eg/pssh-keygen
Net-SSH-Perl-1.37/eg/pssh
Net-SSH-Perl-1.37/Changes
Net-SSH-Perl-1.37/MANIFEST
Net-SSH-Perl-1.37/README
Net-SSH-Perl-1.37/SIGNATURE
Net-SSH-Perl-1.37/ToDo
WARNING: This key is not certified with a trusted signature!
Primary key fingerprint: 6AD2 1903 2C08 4E10 2FEF  1CED 26CC D066 CD61 3C9B
--- SIGNATURE Fri Aug  9 15:08:32 2013
+++ (current) Thu Oct  2 17:49:33 2014
@@ -1,9 +1,9 @@
 SHA1 cc451367f759ef30c8200859b4248973a973b623 .perlcriticrc
-SHA1 08fdfcbe9db3d8d0c13a3dc4681001cf2c7247ad Changes
+SHA1 fcc792606604f76d1109a1709df6a195b80dd9bf Changes
 SHA1 f235ba4160673bcb7c9d58c2f09dbc7fc0efadea LICENSE
 SHA1 d6a61ea9371de92127e4afc234b6f6651535ed1b MANIFEST
 SHA1 84efc47ee3a4253e0ab8029a26c263a6553beda7 MANIFEST.SKIP
-SHA1 378c9d5867b7e8cba6f5576b4593d6303264ee8d META.yml
+SHA1 e0fa7a8c927d58aca40ea8048e93b8f99d3da8a4 META.yml
 SHA1 ed90f5c217f68c08f9fcdeb40870b09e855d704d Makefile.PL
 SHA1 c4f71c29acb966232282d57b570484f7ceef208b README
 SHA1 ca4a01e14284c7a3efa45229e3ba0877ade60285 ToDo
@@ -13,7 +13,7 @@
 SHA1 3a7ecc57b316a02a72f8f56602b6d59aa4a4c2ce eg/pssh-keygen
 SHA1 c36af8adc7bcc9ccbef3beed15723a4a0e8db15a eg/remoteinteract.pl
 SHA1 7ff227ceb0c28c8f98b5772072eb6bf908f96555 eg/remoteinteract2.pl
-SHA1 5cba731f48de8687477d24364851434bf148cf9c lib/Net/SSH/Perl.pm
+SHA1 2ad9d0f12cca78d937bacf4488bd95555b8342c8 lib/Net/SSH/Perl.pm
 SHA1 f7b6f7cd52ce138615b0fa1bbd0b965bd138e4e8 lib/Net/SSH/Perl/Agent.pm
 SHA1 42d0e1ae5b5c4f90dfcc8b28076ec94c682174f0 lib/Net/SSH/Perl/Auth.pm
 SHA1 2587036da2cddb5278e84db1cc10d2d2c2cd1029 lib/Net/SSH/Perl/Auth/ChallengeResponse.pm
@@ -38,7 +38,7 @@
 SHA1 0479eae6ae99108e46cc859c2f053845ace7ab7d lib/Net/SSH/Perl/Cipher/RC4.pm
 SHA1 3df4c4dda730c0114f23d80b30a37b33ccefd40c lib/Net/SSH/Perl/Comp.pm
 SHA1 b75708438f4def2fd96fa8e1570ab999b49f7e19 lib/Net/SSH/Perl/Comp/Zlib.pm
-SHA1 61063ffcb55c106e534918585d61950659dc84a9 lib/Net/SSH/Perl/Config.pm
+SHA1 db89d433540d03283a20a21c9700c901e2657bea lib/Net/SSH/Perl/Config.pm
 SHA1 59160d52f16e23fb362948632d8325ce7dcfc4af lib/Net/SSH/Perl/Constants.pm
 SHA1 921a224def784e988c01395b2634bcb9bdd2cbd9 lib/Net/SSH/Perl/Handle.pm
 SHA1 008d3ebd3a2e5b2ff5a622bba6b3f2286a587948 lib/Net/SSH/Perl/Handle/SSH1.pm
==> MISMATCHED content between SIGNATURE and distribution files! <==

Signature invalid for distribution file. Please investigate.

I'd recommend removing
/tmp/cpan/sources/authors/id/S/SC/SCHWIGON/Net-SSH-Perl-1.37.tar.gz. Some
error occurred   while checking its signature, so it could    be
invalid. Maybe you have configured        your 'urllist' with a bad
URL. Please check this array with 'o conf urllist' and retry. Or       
examine the distribution in a subshell. Try
  look SCHWIGON/Net-SSH-Perl-1.37.tar.gz
and run
  cpansign -v
  SCHWIGON/Net-SSH-Perl-1.37.tar.gz
  Did not pass the signature test.
Stopping: 'install' failed for 'Net::SSH::Perl'.
briandfoy commented 1 year ago

from greg@turnstep.com

Thanks for the report. I just uploaded version 1.38 with a (hopefully) working SIGNATURE file. Please give it a try when it hits your local CPAN.

briandfoy commented 1 year ago

from MARKLE@cpan.org

Installation with cpan works now with check_sigs. However I get this warning:

gpg: Signature made Mon 06 Oct 2014 04:48:03 AM PDT using DSA key ID 14964AC8 gpg: Can't check signature: public key not found

Developer keys get imported to GPG with installation of Module::Signature. You have to convince them to add keys there for any Net::SSH::Perl developer who might upload packages.

Thanks. -Mark

briandfoy commented 1 year ago

from schwigon@cpan.org

Do you still have this issue with the latest 0.42?

Steffen

On Thu Oct 16 15:56:00 2014, MARKLE wrote:

Installation with cpan works now with check_sigs. However I get this warning:

gpg: Signature made Mon 06 Oct 2014 04:48:03 AM PDT using DSA key ID 14964AC8 gpg: Can't check signature: public key not found

Developer keys get imported to GPG with installation of Module::Signature. You have to convince them to add keys there for any Net::SSH::Perl developer who might upload packages.

Thanks. -Mark

lemrouch commented 1 year ago

Hi, we have this problem with 2.141

--- SIGNATURE Tue Jul 25 20:37:53 2023
+++ (current) Sat Aug  5 18:05:08 2023
@@ -1,12 +1,15 @@
 SHA1 cc451367f759ef30c8200859b4248973a973b623 .perlcriticrc
-SHA1 2edb30538a94289b48190377d1514a3cd01bc594 Changes
-SHA1 f235ba4160673bcb7c9d58c2f09dbc7fc0efadea LICENSE
-SHA1 701bf32f98dd1532d879b5b11d4a50e1d43ee7e1 MANIFEST
-SHA1 84efc47ee3a4253e0ab8029a26c263a6553beda7 MANIFEST.SKIP
-SHA1 0e7b3dfa1f55c7fbc3f3f63d351925cf3fc00b5c META.yml
-SHA1 101b435e682e36691bd74fa3ab0edf8e6ea5a568 Makefile.PL
+SHA1 d50133b64f5f3ef9c851baab0a59c2f3f13c0e41 Changes
+SHA1 e5249267483b877d569b9aa6d592f6d03681ffb8 LICENSE
+SHA256 952c1f0e0338cebf031d08cc5828960b02b6dbd7c6eec28f3af2e661b2b16ef8 LICENSE_ARTISTIC
+SHA256 5ccd663ceef9fdd44e3ed4bc695b519c3796547f218195bd2bc8c9127478bdca LICENSE_GNU
+SHA1 36902a1e67ddc9e00e8ce04d9ea25e78f23fc665 MANIFEST
+SHA1 f02b8806a24646bdce8e1d00d3024195604feec5 MANIFEST.SKIP
+SHA256 075c424c3b552d94d032e5f777f5217f95087af5bacbe368913cb2c06493be62 META.json
+SHA1 c5fb1771a673b8a7522a8352bdeb2d0c079c716a META.yml
+SHA1 fb68c99911504ae344a2a051eff96673ea0bcacd Makefile.PL
 SHA1 c87e9dfdc4402803b6be723dae91f3da509f2b19 Perl.xs
-SHA1 3ca65ddd30a0bf42687d1f5ae5e72422757e9833 README
+SHA1 073fb7f7222ef19c8bc64de0d8acfa7e62ccd0b6 README
 SHA1 db019f46625b47591742b6eeacb28b031e3b1634 ToDo
 SHA1 54db75321e7819c82be772cf92feb7ae09b2389c eg/cmd.pl
 SHA1 02bc5d589eb15f36d6a971440f9636184f7a0279 eg/pscp
@@ -14,22 +17,22 @@
 SHA1 ee95b6ef067a3ca5434fe249c81297f1e44d1009 eg/pssh-keygen
 SHA1 c36af8adc7bcc9ccbef3beed15723a4a0e8db15a eg/remoteinteract.pl
 SHA1 7ff227ceb0c28c8f98b5772072eb6bf908f96555 eg/remoteinteract2.pl
-SHA1 ef4ae05d92c1a81b4385e4bb7d59b234c5edc530 lib/Net/SSH/Perl.pm
-SHA1 99e4933fcc699154084f70ec4f17ea18f8280819 lib/Net/SSH/Perl/Agent.pm
-SHA1 fcaf17a31c625344a591f0fd42a033ebbcbd31b4 lib/Net/SSH/Perl/Auth.pm
-SHA1 9b539c1489f9cc3d3f6dcb8281f4af3fdf3ba52f lib/Net/SSH/Perl/Auth/ChallengeResponse.pm
-SHA1 0f27bc5682530c02e405a9e4463cddff3c501e9f lib/Net/SSH/Perl/Auth/KeyboardInt.pm
+SHA1 17ae9393ecd1f0034a384475e10b181d7c22fc89 lib/Net/SSH/Perl.pm
+SHA1 5272764e49d30922174adcf988ceb33072912096 lib/Net/SSH/Perl/Agent.pm
+SHA1 62ad70c6656b6dd4c5bf76c531498d3cdc1865da lib/Net/SSH/Perl/Auth.pm
+SHA1 27db9ec0fe09941d4138e4765b161d736c6f7ce5 lib/Net/SSH/Perl/Auth/ChallengeResponse.pm
+SHA1 e2d2419e38e9ab0c6b44cbab92b8284daa323ab3 lib/Net/SSH/Perl/Auth/KeyboardInt.pm
 SHA1 e60b722641a88221e6587b01abb48f8fe214cdf4 lib/Net/SSH/Perl/Auth/KeyboardInteractive.pm
-SHA1 ee124f6aee66acc6945e72f90ec1014127978f91 lib/Net/SSH/Perl/Auth/Password.pm
-SHA1 a714b6c5b9bb75ff605e4d3fc50e706b5c17b612 lib/Net/SSH/Perl/Auth/PublicKey.pm
-SHA1 cb3f1af1aef29dbbdc8e501b5b984e80f49e095a lib/Net/SSH/Perl/Auth/RSA.pm
-SHA1 3d0ce3a3d89da258ec967605394aaea1f3179677 lib/Net/SSH/Perl/Auth/Rhosts.pm
-SHA1 142fd6bec7cf1d43ef66ea07e248ea47096acee7 lib/Net/SSH/Perl/Auth/Rhosts_RSA.pm
-SHA1 43845a5767f1267b668149dacf07ce001ff66177 lib/Net/SSH/Perl/AuthMgr.pm
-SHA1 ce24770a951d3a32460969a2502d5fc310937056 lib/Net/SSH/Perl/Buffer.pm
-SHA1 224559dcc5b44b042dd3e518563921f0af7b97ef lib/Net/SSH/Perl/Channel.pm
-SHA1 3ec349b3d42c35e4b75796193a6b4d4614f68f51 lib/Net/SSH/Perl/ChannelMgr.pm
-SHA1 7c938b8a7feab7fed9c837b6fb043c381bf2c94c lib/Net/SSH/Perl/Cipher.pm
+SHA1 03a8df14411394c267b3ef4593aee138acc7d551 lib/Net/SSH/Perl/Auth/Password.pm
+SHA1 1aa0017520bf1e132675ac37c357d4c8e78d72d3 lib/Net/SSH/Perl/Auth/PublicKey.pm
+SHA1 b449784827444347d8ae0de2e143ec9faf4fbf6a lib/Net/SSH/Perl/Auth/RSA.pm
+SHA1 bf3fabad87c1f7a64a7f6c0fd1f69b7976088427 lib/Net/SSH/Perl/Auth/Rhosts.pm
+SHA1 e3352c362a3501a8b1f298f590bb8675044639b1 lib/Net/SSH/Perl/Auth/Rhosts_RSA.pm
+SHA1 6a62caf7454adcfee91055a21fd4e43f948f7408 lib/Net/SSH/Perl/AuthMgr.pm
+SHA1 c02b60ea86330466044c3146c2993e825907a5b7 lib/Net/SSH/Perl/Buffer.pm
+SHA1 66457c5f2e24a67b90cbaddfee0934b1d2d07a33 lib/Net/SSH/Perl/Channel.pm
+SHA1 d976e9f5cbfba98b76cd92cf921873c574faec19 lib/Net/SSH/Perl/ChannelMgr.pm
+SHA1 021dbe66f4083b15895279033a9b32e0e02f7920 lib/Net/SSH/Perl/Cipher.pm
 SHA1 a595c00322c4e89a00b0afa2e37138a3160a7b62 lib/Net/SSH/Perl/Cipher/AES128_CBC.pm
 SHA1 ef3645892912acdac86510da9ddf6191ea50bd33 lib/Net/SSH/Perl/Cipher/AES128_CTR.pm
 SHA1 152dbceca1e4926c3ffbb532fcf671e2462a6755 lib/Net/SSH/Perl/Cipher/AES192_CBC.pm
@@ -37,59 +40,59 @@
 SHA1 e880afb9247233c694cc907e294781430d461ddd lib/Net/SSH/Perl/Cipher/AES256_CBC.pm
 SHA1 429d5e602654995f7f0d22b5efa2ea1562a2e54f lib/Net/SSH/Perl/Cipher/AES256_CTR.pm
 SHA1 da77aa6bdfba10c151ef74651229c89ea22dd370 lib/Net/SSH/Perl/Cipher/AES_CBC.pm
-SHA1 9e616866b445c8c70a6625fda79db8ba064ae2eb lib/Net/SSH/Perl/Cipher/AES_CTR.pm
-SHA1 642ad0c39c862c2210ad25a949e04ce2c89be066 lib/Net/SSH/Perl/Cipher/Blowfish.pm
-SHA1 4febb65cca0e9883545db4c04bd0369113fcfecd lib/Net/SSH/Perl/Cipher/CBC.pm
-SHA1 ece9cb5da749a60c6ab0c3a4ec2c1e0bde25c733 lib/Net/SSH/Perl/Cipher/CFB.pm
+SHA1 251e7e9f694be66422b47013e9043eef929989f8 lib/Net/SSH/Perl/Cipher/AES_CTR.pm
+SHA1 fb8a8c998484db3dc2294be4e39d125818bd1bb1 lib/Net/SSH/Perl/Cipher/Blowfish.pm
+SHA1 e4130e17f55f1d0f2b7189690729ca58ec5af718 lib/Net/SSH/Perl/Cipher/CBC.pm
+SHA1 5d75745cf2795b2ef10a90d34bb997c96bfa8f88 lib/Net/SSH/Perl/Cipher/CFB.pm
 SHA1 30c0732c78221b0b64a56299745e2a30f1c18512 lib/Net/SSH/Perl/Cipher/CTR.pm
-SHA1 208858c62d30e1993f272a85480c7fdde141e54a lib/Net/SSH/Perl/Cipher/ChachaPoly.pm
+SHA1 9dffa5ba8038f80d4a354c2a111d4030c2507080 lib/Net/SSH/Perl/Cipher/ChachaPoly.pm
 SHA1 30787d3962c9933c70069f57783177ff88b793c1 lib/Net/SSH/Perl/Cipher/ChachaPoly.xs
-SHA1 40d5c2f1122946eb748097ad6daf77ddff48bf56 lib/Net/SSH/Perl/Cipher/DES.pm
-SHA1 eec201128cd4fca21a870e8b54f1277b84746e6b lib/Net/SSH/Perl/Cipher/DES3.pm
-SHA1 acbce1077fafd013464ab0bd09fb7e662efaef4d lib/Net/SSH/Perl/Cipher/IDEA.pm
-SHA1 21344b8bd2cb9ba9c5cd0f522ee3dd28c503407e lib/Net/SSH/Perl/Cipher/RC4.pm
-SHA1 a83a82f4225f9c3c3fb1d2ce987c5b26c4840430 lib/Net/SSH/Perl/Comp.pm
-SHA1 e82ab42ea92f64bbe5773fb953a58cf967167682 lib/Net/SSH/Perl/Comp/Zlib.pm
-SHA1 f79a5cf1d10a77274d88a2434f737c6f70503415 lib/Net/SSH/Perl/Config.pm
-SHA1 8ead2a3977a19882b1bc69ece3e1803c1976fa45 lib/Net/SSH/Perl/Constants.pm
+SHA1 29941d479518d41d1a2fa3c0cba76d6657137982 lib/Net/SSH/Perl/Cipher/DES.pm
+SHA1 f5ac87cb363ead1b57c4159c7f96182b3d903a7e lib/Net/SSH/Perl/Cipher/DES3.pm
+SHA1 e9c99b59dd8fb73970cba9f5c40aa4fb7c590778 lib/Net/SSH/Perl/Cipher/IDEA.pm
+SHA1 58cc3cfb451ce7774434aaf26889d3ac48da3ef4 lib/Net/SSH/Perl/Cipher/RC4.pm
+SHA1 1829550384c968c7f107a885e4e10981178e90ad lib/Net/SSH/Perl/Comp.pm
+SHA1 a2f4d8d09786e4f4b789c923f7c858135b63d08a lib/Net/SSH/Perl/Comp/Zlib.pm
+SHA1 dee5c03448f644ca74a06bd429ffe72d0c12f72f lib/Net/SSH/Perl/Config.pm
+SHA1 4a5f04040b6a8337efc7f02861671f025eca6905 lib/Net/SSH/Perl/Constants.pm
 SHA1 b1ee21fcdfbf4e94eadf36e9e2d95f6a01f73732 lib/Net/SSH/Perl/Handle.pm
 SHA1 9e80b0602ed189e37f8728a08419a5ca99f9f30a lib/Net/SSH/Perl/Handle/SSH1.pm
 SHA1 999d57d14d7b8ebbbf6f882f9456518f69dd468f lib/Net/SSH/Perl/Handle/SSH2.pm
-SHA1 6336e48af52c5cd6882df17b3cab9bc4f155832d lib/Net/SSH/Perl/Kex.pm
+SHA1 76520e25be962023d068c9edade2673ffe100eef lib/Net/SSH/Perl/Kex.pm
 SHA1 702210a6e038ffcafc005b27b4e6cd1de9281e58 lib/Net/SSH/Perl/Kex/C25519.pm
-SHA1 a211c47863bdac01f5438f3c73a2ebf387a5d1ef lib/Net/SSH/Perl/Kex/DH.pm
-SHA1 d21f839cbf545ba6607934a8d7b8b22651dc78e7 lib/Net/SSH/Perl/Kex/DH1.pm
+SHA1 d34610d99dd2ed9e4009b14263f7a592e5a4ae0f lib/Net/SSH/Perl/Kex/DH.pm
+SHA1 12048557e1370e51bc6aa8513e63a7f0ecfd72ed lib/Net/SSH/Perl/Kex/DH1.pm
 SHA1 f5d33815fdaa072ab3846d88fd08cbe508817ec2 lib/Net/SSH/Perl/Kex/DH14SHA1.pm
 SHA1 9df4f59bf4f36f1869c2fac4f5ce4232c55e6a2e lib/Net/SSH/Perl/Kex/DH14SHA256.pm
 SHA1 6c01bddd9707b05aca9601b50f4ce9bc082c3891 lib/Net/SSH/Perl/Kex/DH16SHA512.pm
 SHA1 cb1f2e620f4e39f27c9a0db4c5c5bdb78b7e17cb lib/Net/SSH/Perl/Kex/DH18SHA512.pm
-SHA1 e910319be74f084395c7edc94ece20d2bbfdaab5 lib/Net/SSH/Perl/Kex/DHGEX.pm
+SHA1 77f2ee48356080eb375566f9fab2e6422780eb56 lib/Net/SSH/Perl/Kex/DHGEX.pm
 SHA1 c8b50e437c4dbe9516902d46025086d0d174ae85 lib/Net/SSH/Perl/Kex/DHGEXSHA1.pm
 SHA1 138767e970149de786eb64eb6ace5afbbff91029 lib/Net/SSH/Perl/Kex/DHGEXSHA256.pm
-SHA1 cb9178232b62058c0ab552120e74a8ea9b97efef lib/Net/SSH/Perl/Key.pm
-SHA1 b1dab3d4e9c69a13395d644d0c68482289a23483 lib/Net/SSH/Perl/Key/DSA.pm
+SHA1 0179dc077a57e7fed6744b090c06561f13e042ca lib/Net/SSH/Perl/Key.pm
+SHA1 b61780b20983408a0513dce442e89d553f0a18ae lib/Net/SSH/Perl/Key/DSA.pm
 SHA1 352d03ed1b4e8169e2cc0136b9cf1d0124220cca lib/Net/SSH/Perl/Key/ECDSA.pm
 SHA1 d6bd555c14b4065dab9221b920ca2e2a531ba5c2 lib/Net/SSH/Perl/Key/ECDSA256.pm
 SHA1 8a1736eaf4c6928e04f8af1f15cc8ce06d37cd09 lib/Net/SSH/Perl/Key/ECDSA384.pm
 SHA1 3634f06cf3f1479f6bed2e885830884615b9df0b lib/Net/SSH/Perl/Key/ECDSA521.pm
-SHA1 4c2f391f96e82eb7af10ce2ad7df7092a93e6023 lib/Net/SSH/Perl/Key/Ed25519.pm
+SHA1 d4b94e584c2c9518f3280f7603c2fc9ec698f589 lib/Net/SSH/Perl/Key/Ed25519.pm
 SHA1 470575326333cbff8a36e4785d7cdb88b92b2ad1 lib/Net/SSH/Perl/Key/Ed25519.xs
-SHA1 7e14cbe1d46907224f6ab3b4ba39781a95798f77 lib/Net/SSH/Perl/Key/RSA.pm
-SHA1 ba45cd950b22a2b388b111752b58c207034cdcb7 lib/Net/SSH/Perl/Key/RSA1.pm
-SHA1 23b05df245f17438ed4c206a033302415715e720 lib/Net/SSH/Perl/Mac.pm
-SHA1 975925caa369f249c32dd5f98c733acbb0827f7a lib/Net/SSH/Perl/Packet.pm
+SHA1 c3ca7d50bcab8f7cd8c3929a3b5d5c0f3b312c56 lib/Net/SSH/Perl/Key/RSA.pm
+SHA1 7801b904e32f6c477e30947ca8b6ad5c2ed54c0a lib/Net/SSH/Perl/Key/RSA1.pm
+SHA1 f403c0dbdef4f162c0e022eb30591d7e06c5b5ad lib/Net/SSH/Perl/Mac.pm
+SHA1 9944ce5287bc3d588bc3c30032e6aa5ccbc2f23c lib/Net/SSH/Perl/Packet.pm
 SHA1 32c885d48ae7296def3c50437ace63e531c5c899 lib/Net/SSH/Perl/Proxy.pm
-SHA1 08263fff918ef4785fe9523436d70b68603714f7 lib/Net/SSH/Perl/SSH1.pm
-SHA1 c8aed7231664b13cb12c959799cdfb3dcb468a89 lib/Net/SSH/Perl/SSH2.pm
-SHA1 eeed6b1ec159761bf772a298c23e45def36853f5 lib/Net/SSH/Perl/Subsystem/Client.pm
-SHA1 696e872f51fb3897fa2437b7be4f9b77ad22f706 lib/Net/SSH/Perl/Subsystem/Server.pm
-SHA1 852b3fc84661f1bc621ad91666b7ff2cc7f45c04 lib/Net/SSH/Perl/Util.pm
-SHA1 f755e3f861aeaf9adb2bd4eea9e4543c88f92d19 lib/Net/SSH/Perl/Util/Authfile.pm
-SHA1 04404646bb0d934412c1015a7f22f01f4e9846b7 lib/Net/SSH/Perl/Util/Hosts.pm
-SHA1 4a631d99799ca33b2186365e0718fa86d390fd64 lib/Net/SSH/Perl/Util/RSA.pm
-SHA1 c539f02554917a5377438d2c6b23ff7b2ea04022 lib/Net/SSH/Perl/Util/SSH1MP.pm
-SHA1 428908846951998f302ef1f77115bd8c436ecac0 lib/Net/SSH/Perl/Util/SSH1Misc.pm
-SHA1 9f28e16409d1139b2d8f14a369137a851d379a09 lib/Net/SSH/Perl/Util/Term.pm
+SHA1 2f51b866fbd630748443be682b211ef6301d1643 lib/Net/SSH/Perl/SSH1.pm
+SHA1 686f57a13df1e6d0875455f638e086b54cec85af lib/Net/SSH/Perl/SSH2.pm
-SHA1 eeed6b1ec159761bf772a298c23e45def36853f5 lib/Net/SSH/Perl/Subsystem/Client.pm
-SHA1 696e872f51fb3897fa2437b7be4f9b77ad22f706 lib/Net/SSH/Perl/Subsystem/Server.pm
-SHA1 852b3fc84661f1bc621ad91666b7ff2cc7f45c04 lib/Net/SSH/Perl/Util.pm
-SHA1 f755e3f861aeaf9adb2bd4eea9e4543c88f92d19 lib/Net/SSH/Perl/Util/Authfile.pm
-SHA1 04404646bb0d934412c1015a7f22f01f4e9846b7 lib/Net/SSH/Perl/Util/Hosts.pm
-SHA1 4a631d99799ca33b2186365e0718fa86d390fd64 lib/Net/SSH/Perl/Util/RSA.pm
-SHA1 c539f02554917a5377438d2c6b23ff7b2ea04022 lib/Net/SSH/Perl/Util/SSH1MP.pm
-SHA1 428908846951998f302ef1f77115bd8c436ecac0 lib/Net/SSH/Perl/Util/SSH1Misc.pm
-SHA1 9f28e16409d1139b2d8f14a369137a851d379a09 lib/Net/SSH/Perl/Util/Term.pm
+SHA1 2f51b866fbd630748443be682b211ef6301d1643 lib/Net/SSH/Perl/SSH1.pm
+SHA1 686f57a13df1e6d0875455f638e086b54cec85af lib/Net/SSH/Perl/SSH2.pm
+SHA1 8f0c133058e8dd7475fcd5e68b4f70f41c6a0886 lib/Net/SSH/Perl/Subsystem/Client.pm
+SHA1 235abb73e0b489d62f08d3812ab873d85aea9713 lib/Net/SSH/Perl/Subsystem/Server.pm
+SHA1 22769eaf067e0cd1cb6cf5de571a5828f9940bba lib/Net/SSH/Perl/Util.pm
+SHA1 287d155c54bc5d750ddadcd3be2247ee049b4660 lib/Net/SSH/Perl/Util/Authfile.pm
+SHA1 c7d992bf8751a6fe6e36d1fc274cf1df161aebce lib/Net/SSH/Perl/Util/Hosts.pm
+SHA1 8c4192f5984056f61b0b67cbc0ce5556790d2ab9 lib/Net/SSH/Perl/Util/RSA.pm
+SHA1 2f80a84553ed646f4acb4d906a1070368c93f807 lib/Net/SSH/Perl/Util/SSH1MP.pm
+SHA1 78f1aae715f7f3088ec5b6ad249cc802ea3db166 lib/Net/SSH/Perl/Util/SSH1Misc.pm
+SHA1 77dacd965080be7bf40255ff8d73b31773e84203 lib/Net/SSH/Perl/Util/Term.pm
 SHA1 265e3a3334172d419de00fef1b5c1d362004de26 lib/Net/SSH/Perl/Util/Win32.pm
 SHA1 2adb5cbc9065eea047f857161ca99f611a422216 ppport.h
 SHA1 0c1a83c415c58abb94cd6ba1e0ad684f9f010a4b src/blowfish/blf.h
==> MISMATCHED content between SIGNATURE and distribution files! <==

Signature invalid for distribution file. Please investigate.

I'd recommend removing
/home/hudson/.cpan/sources/authors/id/B/BD/BDFOY/Net-SSH-Perl-2.141.tar.gz.
briandfoy commented 1 year ago

I've release 2.142 to fix this. This is my fault for not updating the SIGNATURES file before I shipped.

One of my upcoming tasks had been to hank out the Module::Signature stuff. There's not much security there (an attacker can just change the SIGNATURES file), and if you want to know if something has changed, you can create it locally. It would be more useful if the author could gpg-sign the SIGNATURES, but then there's the problem of distributing and managing keys at scale.

lemrouch commented 1 year ago

It works now. Thanks a lot!