search

laurentj / slimerjs

A scriptable browser like PhantomJS, based on Firefox
http://slimerjs.org
Other
3k stars 259 forks source link

SlimerJS SHA1 mismatch via Homebrew #243

Open skycaptain opened 9 years ago

skycaptain commented 9 years ago

Running brew install slimerjs --without-xulrunner results in

==> Downloading http://download.slimerjs.org/v0.9/0.9.1/slimerjs-0.9.1.zip
Already downloaded: /Library/Caches/Homebrew/slimerjs-0.9.1.zip
Error: SHA1 mismatch
Expected: 15eed855c462c5b7ff2502d028702dcebae797cd
Actual: fa3c0402cdf4b0512daaaac0d97f92c994f1f1b8
Archive: /Library/Caches/Homebrew/slimerjs-0.9.1.zip
To retry an incomplete download, remove the file above.

Is this on purpose?

ref Homebrew/homebrew#33560

laurentj commented 9 years ago

I'm not responsible of this homebrew package. Try to contact the manager of this package.

skycaptain commented 9 years ago

The thing is that the homebrew package directly referes to http://download.slimerjs.org/v0.9/0.9.x/slimerjs-0.9.x.zip as you can see on the log. So the question is whether you'd modified your original release *.zip, so the sha1 shifted. This has nothing to do with homebrew in the first place.

MikeMcQuaid commented 9 years ago

Did you deliberately change the contents of that versioned package or was your server hacked?

laurentj commented 9 years ago

Did you deliberately change the contents of that versioned package

I don't remember. Perhaps.

was your server hacked?

I don't know.

BTW, the 0.9.1 is deprecated. Homebrew package should point to 0.9.3.

MikeMcQuaid commented 9 years ago

BTW, the 0.9.1 is deprecated. Homebrew package should point to 0.9.3.

Ok. I'll update once you're able to investigate this. Thanks!

laurentj commented 9 years ago

Note also that the URL has changed.

laurentj commented 9 years ago

Probably the builds changed during my work on the server, when I changed URL and install/configure a new automatic deployment system. It occured at the same date of builds of 0.9.1.

Date of builds of 0.9.3 are ok so it should be good packages.

skycaptain commented 9 years ago

@mikemcquaid: I've already created a pull-request a few days ago

laurentj commented 9 years ago

Note that a checksum is now published for each packages, signed with a gpg key : http://slimerjs.org/checksum.html . @mikemcquaid : all packages on downloads.slimerjs.org should be ok. You can update homebrew packages.