[OS X TeX] i-installer MD5 checksum errors

[Gerben Wierda]

On Tuesday, Nov 5, 2002, at 17:23 Europe/Amsterdam, Dr. Paul Fons wrote:

> Thank you for your quick response.  The error message is reproducible 
> (not a remote package being updated).  For example, if I attempt to 
> run the ghostscript 7 i-installer script, I get a MD5 checksum error 
> regardless of the settings regarding the cache in the preferences and 
> the update always fails.  This does not happen for new packages (for 
> example, I installed the rtf->latex converter without error).  I 
> turned the log level up to 4 and the following was recorded:
>
> gpg: Signature made Fri Nov  1 21:26:26 2002 JST using DSA key ID 
> C87AB5FC
> gpg: requesting key C87AB5FC from HKP keyserver wwwkeys.nl.pgp.net
> gpg: Good signature from "i-Installer <iinstaller at rna.nl>"
> gpg: checking the trustdb
> gpg: no ultimately trusted keys found
> gpg: WARNING: This key is not certified with a trusted signature!
> gpg:          There is no indication that the signature belongs to the 
> owner.
> Fingerprint: C1BA 787F 78B0 18D2 B6E7  9464 9D03 DB70 C87A B5FC
>
> Does this imply that the package in question has been perhaps 
> unintentionally changed somewhere along the way?

No. The MD5 checksum and the GPG signature are independent. This only 
says that there is a *good* signature, but that the public key used is 
not signed by people you have said to trust. GPG has rather draconic 
possibilities here with respect to trust.

As the originator of iinstaller at rna.nl I can tell you that

C1BA 787F 78B0 18D2 B6E7  9464 9D03 DB70 C87A B5FC

is correct, but officially you should call me on te phone to verify 
that. Is is normally fine to turn GPG-checking off and only check teh 
TOC signature by hand.

My original answer still stands (cache).

Note that you may try to remove the local copy of the package 
alltogether and open it from another server to see if that helps. Also, 
OFF LIST, send me more than just the output you have now sent. There is 
no need to waste bandwidth until there is a solution to report.

G


-----------------------------------------------------
Mac TeX info, resources, and news can be found at:
<http://www.esm.psu.edu/mac-tex/>
-----------------------------------------------------
List archives can be found at:
<http://www.esm.psu.edu/mac-tex/MacOSX-TeX-Digests/>
-----------------------------------------------------
See message headers for list info.
-----------------------------------------------------