Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Not matching checksum for 3.0.7 #2378

Closed
ilmaruk opened this issue Nov 14, 2019 · 4 comments
Closed

Not matching checksum for 3.0.7 #2378

ilmaruk opened this issue Nov 14, 2019 · 4 comments

Comments

@ilmaruk
Copy link
Contributor

ilmaruk commented Nov 14, 2019

The checksum for v3.0.7 doesn't seem to match that of sum.golang.org.

$ go get goa.design/goa/v3
verifying goa.design/goa/v3@v3.0.7/go.mod: checksum mismatch
	downloaded: h1:LBOZJ4IG44oG7RBu6R3oLpRo95Y4e4AFi2JHwl0EsSo=
	sum.golang.org: h1:sEWV8VRLZenziAnHcIHjjGvlC2pwEvNblwBtMuyPwqQ=

SECURITY ERROR
This download does NOT match the one reported by the checksum server.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.

For more information, see 'go help module-auth'.

Could you please check?

@raphael
Copy link
Member

raphael commented Nov 14, 2019

Hmm strange the checksum isn't something that comes from the repo... Have you tried removing the local copy of go.sum?

@Yvonne2017
Copy link

@raphael, I have seen the same issue as well.

@raphael
Copy link
Member

raphael commented Nov 27, 2019

This has been reported by others as well. I wonder if it's related to golang/go#34065 - basically different versions of the Go compiler could generate different checksums (versions 1.11.4 and older vs newer). Try deleting your $GOPATH/pkpg/mod/cache and see whether that fixes it.

@raphael
Copy link
Member

raphael commented Dec 12, 2019

Closing this issue, v3.0.8 has been released and I can't reproduced the issue.

@raphael raphael closed this as completed Dec 12, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants