Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Failed to fetch package (hash sum mismatch) #32

Closed
maxjust opened this issue May 23, 2020 · 4 comments
Closed

Failed to fetch package (hash sum mismatch) #32

maxjust opened this issue May 23, 2020 · 4 comments

Comments

@maxjust
Copy link

maxjust commented May 23, 2020

#>go get github.com/fasthttp/router  
go get github.com/fasthttp/router
go: github.com/fasthttp/router upgrade => v1.1.3
go: downloading github.com/fasthttp/router v1.1.3
go get: github.com/fasthttp/router@v1.1.3: verifying module: checksum mismatch
        downloaded: h1:q042AM9cSgVNvpG1T+lMAiL1PXLcTs94n1pCDQ737ss=
        sum.golang.org: h1:xxYAxTON68tX8pXwdw3cCPOYvKoXIbfrouBEuG6kFsk=

SECURITY ERROR
This download does NOT match the one reported by the checksum server.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.
@savsgio
Copy link
Member

savsgio commented May 24, 2020

Hi @maxjust,

Remove the go.sum file and try go get again.

@maxjust
Copy link
Author

maxjust commented May 24, 2020

The promblem is not in go.sum. As I write before, problem with mismatch cache between downloaded package hash during install and published hash in sum.golang.org, in my opinion you publish wrong hash to sum.golang.org

go get: github.com/fasthttp/router@v1.1.3: verifying module: checksum mismatch
        downloaded: h1:q042AM9cSgVNvpG1T+lMAiL1PXLcTs94n1pCDQ737ss=
        sum.golang.org: h1:xxYAxTON68tX8pXwdw3cCPOYvKoXIbfrouBEuG6kFsk=

@savsgio
Copy link
Member

savsgio commented May 24, 2020

I have installed the router v1.1.3 in my framework and i have the correct hash in the go.sum
https://github.com/savsgio/atreugo/blob/master/go.sum#L4

Try to remove the go.sum, please.

@maxjust
Copy link
Author

maxjust commented May 24, 2020

yes, you was right, removing the go.sum solved issue, thanks!

@maxjust maxjust closed this as completed May 24, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants