keyboardio / Chrysalis

Graphical configurator for Kaleidoscope-powered keyboards
https://github.com/keyboardio/Chrysalis#chrysalis
GNU General Public License v3.0
497 stars 65 forks source link

Automatic Update Fails: Error during update: Error: sha512 checksum mismatch #1276

Closed Zian closed 1 year ago

Zian commented 1 year ago

Describe the bug Chrysalis cannot update itself. It says the file it got is bad.

To Reproduce Steps to reproduce the behavior:

  1. Start Chrysalis.
  2. Wait for the new version to download by watching the progress bar in the lower left corner.

Expected behavior Software update installs.

Actual Result A red floating window appears that says:

Error during update: Error: sha512 checksum mismatch, expected 8eqU1ytk1LOlQcsjaaOeLom3ci2VEgdHRfqdYi3nXFj7UDOsSdvgaVqbNddqXoPQfSQHDWnN3C5fAvK07XhmTg==, got Skw28NoMtmr5rEftlvTFYNoYSffphHlGnv/DNLy1P7wmxym/s8V43FeWHRs20owsyxoJpuLdhv9RZQlY1lWj/w==

Screenshots chrysalis update fails chrysalis-debug.json.txt

Desktop (please complete the following information):

Additional context I asked GitHub for the file the same way that Chrysalis does by re-sending the HTTP requests that Fiddler intercepted. Then, I compared its SHA512 hash against the SHA512 hash of the file that GitHub provided when I downloaded the file using a web browser. The two files have the same hash.

However, neither file hash matches the 2 hashes displayed in the error message.

My files' SHA-512 hashes were both "4A4C36F0DA0CB66AF9AC47ED96F4C560DA1849F7E98479469EFFC334BCB53FBC26C729BFB3C578DC57961D1B363A8C2CCB1A09A6E2DD86FF51650958D485A3FF".

Zian commented 1 year ago

Probably a duplicate of https://github.com/keyboardio/Chrysalis/issues/1269.

obra commented 1 year ago

I've finally tracked this down to a race condition caused by a build on master accidentally overwriting the release build. I've manually repaired the release and am in the process of fixing the build system.

obra commented 1 year ago

(And it's currently flagging a code signing issue on the build now that it downloads. digging into that)