content loader checksum mismatched

ActivePublic

Actions

$ cat /var/tmp/*.json | jq . | grep -C3 "use_minizip"
      "outputHashMode": "flat",
      "type": "url",
      "urls": [
        "https://sources.debian.net/data/main/g/gpsbabel/1.5.3-2/debian/patches/use_minizip"
      ],
      "integrity": "sha256-ma04KK41hlmJozqK88FlkBiJ7p+/ACJDQ4Tx0GnV1w0=",
      "inferredFetcher": "fetchpatch"
--
      "outputHashMode": "flat",
      "type": "url",
      "urls": [
        "https://sources.debian.net/data/main/g/gpsbabel/1.5.3-2/debian/patches/use_minizip"
      ],
      "integrity": "sha256-ma04KK41hlmJozqK88FlkBiJ7p+/ACJDQ4Tx0GnV1w0=",
      "inferredFetcher": "fetchpatch"
$ ipython
...
In [7]: from typing import Dict

In [8]: chksum_algo, chksum_b64 = integrity.split("-")
   ...: checksums: Dict[str, str] = {
   ...:     chksum_algo: base64.decodebytes(chksum_b64.encode()).hex()
   ...: }

In [9]: checksums
Out[9]: {'sha256': '99ad3828ae35865989a33a8af3c165901889ee9fbf0022434384f1d069d5d70d'}

In [10]: exit
$ sha256sum use_minizip
0cedee9714f4295077ee258034dc16b95fd8ecc987e0a75261e5b59054db021a  use_minizip

# cli tools agrees with the python code ^, the integrity filed referenced in the
# manifest is wrong.

# no information on that file from the server (regarding integrity)

$ http head https://sources.debian.net/data/main/g/gpsbabel/1.5.3-2/debian/patches/use_minizip
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
Date: Tue, 04 Oct 2022 08:30:18 GMT
Keep-Alive: timeout=5, max=100
Location: https://sources.debian.org/data/main/g/gpsbabel/1.5.3-2/debian/patches/use_minizip
Permissions-Policy: interest-cohort=()
Referrer-Policy: no-referrer
Server: Apache
Strict-Transport-Security: max-age=15552000
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
X-Xss-Protection: 1

$ http --follow head https://sources.debian.net/data/main/g/gpsbabel/1.5.3-2/debian/patches/use_minizip
HTTP/1.1 200 OK
Accept-Ranges: bytes
Connection: Upgrade, Keep-Alive
Content-Length: 347
Date: Tue, 04 Oct 2022 08:31:00 GMT
ETag: "15b-5534056fd3380"
Keep-Alive: timeout=5, max=100
Last-Modified: Sat, 01 Jul 2017 12:04:46 GMT
Permissions-Policy: interest-cohort=()
Referrer-Policy: no-referrer
Server: Apache
Strict-Transport-Security: max-age=15552000
Upgrade: h2,h2c
X-Clacks-Overhead: GNU Terry Pratchett
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
X-Xss-Protection: 1