Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cut new tag #41

Closed
g-gaston opened this issue Jan 11, 2023 · 2 comments
Closed

Cut new tag #41

g-gaston opened this issue Jan 11, 2023 · 2 comments

Comments

@g-gaston
Copy link

g-gaston commented Jan 11, 2023

I'm not sure what happened, but it's now impossible to add this module as a dependency to other projects because of a checksum mismatch.

$ go get github.com/pavlo-v-chernykh/keystore-go/[email protected]

go: downloading github.com/pavlo-v-chernykh/keystore-go/v4 v4.4.0
go: github.com/pavlo-v-chernykh/keystore-go/[email protected]: verifying module: checksum mismatch
        downloaded: h1:fBO1dUIpQgrrZ7gXJsvDhpNYsfxCuPr6NNtGHiv8FYo=
        sum.golang.org: h1:y9azNmMzvkNBPyczpNRwaV4bm0U6e7Oyrj7gi2/SNFI=

SECURITY ERROR
This download does NOT match the one reported by the checksum server.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.

For more information, see 'go help module-auth'.

Maybe I'm missing something? I have seen this happening in other projects when the git history got rewritten after a tag was already published.

I believe cutting a new tag will solve this, although I'm not sure if we also need a new commit, given that v4.4.0 is already pointing to the last commit.

How to reproduce:

mkdir test-keystore-dep
cd test-keystore-dep
go mod init test-keystore-dep
go get github.com/pavlo-v-chernykh/keystore-go/[email protected]

Thanks a lot! 🙂

@pavlo-v-chernykh
Copy link
Owner

@g-gaston hi. Cannot reproduce the issue on my side. Nevertheless, I cut a new tag v4.4.1. I hope it will help. Have a productive day 😊

@g-gaston
Copy link
Author

Thanks so much!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants