bug#33603: Invalid hash for NSS-Certs

[Ludovic Courtès]

Hi Brett,

Brett Gilio <address@hidden> skribis:

> Generation 10 Dec 03 2018 11:42:41    (current)
>   guix 4f03aa2
>     repository URL: https://git.savannah.gnu.org/git/guix.git
>     branch: master
>     commit: 4f03aa23e805bd653de774e1d74ed2f50826899b
>
> downloading from 
> https://mirror.hydra.gnu.org/guix/nar/gzip/xbj4fhad0lnz0ziflwi90gyqbls8ains-nss-certs-3.39...
>  nss-certs-3.39  145KiB               417KiB/s 00:00 [##################] 
> 100.0%
>
> sha256 hash mismatch for 
> /gnu/store/xbj4fhad0lnz0ziflwi90gyqbls8ains-nss-certs-3.39:
>   expected hash: 101v69xp1qzw9v6pgmbhw7gfdaic8vvs4v5l567lx7f2mjp25rla
>   actual hash:   08ziz714diyfq2klxy1nc0nhr5wa2vd356n9vizlq913a7an9a9s
> substitution of /gnu/store/xbj4fhad0lnz0ziflwi90gyqbls8ains-nss-certs-3.39 
> failed

The problem seems to be gone because I’m seeing the right hash here:

--8<---------------cut here---------------start------------->8---
$ wget -q -O - 
https://mirror.hydra.gnu.org/nar/gzip/xbj4fhad0lnz0ziflwi90gyqbls8ains-nss-certs-3.39
 |gunzip -c |guix hash -
101v69xp1qzw9v6pgmbhw7gfdaic8vvs4v5l567lx7f2mjp25rla
$ wget -q -O - 
https://mirror.hydra.gnu.org/xbj4fhad0lnz0ziflwi90gyqbls8ains.narinfo |grep Hash
NarHash: sha256:101v69xp1qzw9v6pgmbhw7gfdaic8vvs4v5l567lx7f2mjp25rla
--8<---------------cut here---------------end--------------->8---

Could you try again?

However berlin.guixsd.org is publishing the one with hash
08ziz714diyfq2klxy1nc0nhr5wa2vd356n9vizlq913a7an9a9s, and the difference
is an encoding bug:

--8<---------------cut here---------------start------------->8---
$ diff -ru /tmp/nss-certs.{hydra,berlin}
Only in /tmp/nss-certs.hydra/etc/ssl/certs: 
AC_Raíz_Certicámara_S.A.:2.15.7.126.82.147.123.224.21.227.87.240.105.140.203.236.12.pem
Only in /tmp/nss-certs.berlin/etc/ssl/certs: 
AC_Ra?z_Certic?mara_S.A.:2.15.7.126.82.147.123.224.21.227.87.240.105.140.203.236.12.pem
Only in /tmp/nss-certs.hydra/etc/ssl/certs: 
NetLock_Arany_=Class_Gold=_Főtanúsítvány:2.6.73.65.44.228.0.16.pem
Only in /tmp/nss-certs.berlin/etc/ssl/certs: 
NetLock_Arany_=Class_Gold=_F?tan?s?tv?ny:2.6.73.65.44.228.0.16.pem
--8<---------------cut here---------------end--------------->8---

(Probably related to <https://issues.guix.info/issue/32942>.)

Ludo’.