search

zecure / shadowd_ui

The Shadow Daemon user interface
GNU General Public License v2.0
20 stars 9 forks source link

Composer SecurityException #1

Closed Mato-Z closed 9 years ago

Mato-Z commented 9 years ago

Hello, I have been installing shadowd_ui according to this procedure https://shadowd.zecure.org/overview/user_interface/, but when I run php composer.phar install it ends with this error:

[Composer\Repository\RepositorySecurityException]
The contents of http://packagist.org/p/provider-latest$f57dede90e13883cab0a07845e0cb2dc9dc7aed48e4716c90900f83758401348.json do not match its signature. This should indicate a man-in-the-middle attack. Try running composer again and report this if you think it is a mistake.

Can you help me please? Thank you.

zit-hb commented 9 years ago

Hey Mato,

according to this you probably had a conflict with the cron jobs that update the packages at packagist (on the other hand, the issue is pretty old, so maybe not). But try to download composer again anyway and do the installation a second time, maybe with a fresh version of shadowd_ui as well.

Btw. what system/distribution are you on?

Mato-Z commented 9 years ago

Hello zit-hb, thanks for reply! It is very interesting, but when I changed location from my house to my office it works correctly... I use Linux Debian 8 and I have compiled it manually...

zit-hb commented 9 years ago

Oh oh, maybe you should start tunnelling your home network through a VPN ^_^

I consider this fixed then. Either it was a MITM or just coincidence based on timing. If you encounter any other problems please let me know. I can't help much with composer related problems, but it is still interesting to know that they exist.