You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by David Chaplin-Loebell <di...@klatha.com> on 2010/01/06 20:42:20 UTC

sa-update failing

Hi,

I'm trying to update my rules with sa-update, and it is failing:

deliver3# sa-update -D
[98652] dbg: logger: adding facilities: all
[98652] dbg: logger: logging level is DBG
[98652] dbg: generic: SpamAssassin version 3.2.5
[98652] dbg: config: score set 0 chosen.
[98652] dbg: dns: is Net::DNS::Resolver available? yes
[98652] dbg: dns: Net::DNS version: 0.65
[98652] dbg: generic: sa-update version svn607589
[98652] dbg: generic: using update directory: /var/db/spamassassin/3.002005
[98652] dbg: diag: perl platform: 5.008009 freebsd
<snip - let me know if something in here is relevant, just trying to 
make a shorter message>
[98652] dbg: channel: no MIRRORED.BY file available
[98652] dbg: http: GET request, 
http://spamassassin.apache.org/updates/MIRRORED.BY
[98652] dbg: channel: MIRRORED.BY file retrieved
[98652] dbg: channel: reading MIRRORED.BY file
[98652] dbg: channel: found mirror 
http://daryl.dostech.ca/sa-update/asf/ weight=5
[98652] dbg: channel: found mirror http://www.sa-update.pccc.com/ weight=5
[98652] dbg: channel: selected mirror http://daryl.dostech.ca/sa-update/asf
[98652] dbg: http: GET request, 
http://daryl.dostech.ca/sa-update/asf/895075.tar.gz
[98652] dbg: http: GET request, 
http://daryl.dostech.ca/sa-update/asf/895075.tar.gz.sha1
[98652] dbg: http: GET request, 
http://daryl.dostech.ca/sa-update/asf/895075.tar.gz.asc
[98652] dbg: sha1: verification wanted: 
ade9426b8f85bed554604033c71e925e5e597502
[98652] dbg: sha1: verification result: 
b3fa2495f0091f85a8421b39c72b868afef6808f
channel: SHA1 verification failed, channel failed
[98652] dbg: generic: cleaning up temporary directory/files
[98652] dbg: diag: updates complete, exiting with code 4

I searched the list archives for the SHA1 verification error, and found 
nothing recent-- is this problem somehow unique to my system?  Any 
suggestions?

Thanks,
David Chaplin-Loebell

Re: sa-update failing

Posted by David Chaplin-Loebell <di...@klatha.com>.
Justin Mason wrote:
> [98652] dbg: http: GET request,
> http://daryl.dostech.ca/sa-update/asf/895075.tar.gz
> [98652] dbg: http: GET request,
> http://daryl.dostech.ca/sa-update/asf/895075.tar.gz.sha1
> [98652] dbg: http: GET request,
> http://daryl.dostech.ca/sa-update/asf/895075.tar.gz.asc
>
> At a first guess, I suspect a transparent proxy at your site or ISP,
> messing with the HTTP traffic, but it could be something more
> ominous...
>   
There's no proxy interfering with my http traffic.

Manual fetch and verify works as expected:

deliver3# fetch http://daryl.dostech.ca/sa-update/asf/895075.tar.gz
895075.tar.gz                                 100% of  120 kB   24 kBps
deliver3# fetch http://daryl.dostech.ca/sa-update/asf/895075.tar.gz.sha1
895075.tar.gz.sha1                            100% of   56  B  158 kBps
deliver3# fetch http://daryl.dostech.ca/sa-update/asf/895075.tar.gz.asc
895075.tar.gz.asc                             100% of  823  B 2384 kBps
deliver3# sha1 895075.tar.gz
SHA1 (895075.tar.gz) = ade9426b8f85bed554604033c71e925e5e597502
deliver3# cat 895075.tar.gz.sha1
ade9426b8f85bed554604033c71e925e5e597502  895075.tar.gz

Maybe Digest::SHA1 is the problem?  Yes, rebuilding that module solves 
the problem.  Bizarre.

Thanks for the help!

David

Re: sa-update failing

Posted by Justin Mason <jm...@jmason.org>.
Very unusual.  What do you get if you use "wget" or "curl" from the
command line to download those URLs:


[98652] dbg: http: GET request,
http://daryl.dostech.ca/sa-update/asf/895075.tar.gz
[98652] dbg: http: GET request,
http://daryl.dostech.ca/sa-update/asf/895075.tar.gz.sha1
[98652] dbg: http: GET request,
http://daryl.dostech.ca/sa-update/asf/895075.tar.gz.asc

At a first guess, I suspect a transparent proxy at your site or ISP,
messing with the HTTP traffic, but it could be something more
ominous...

--j.

On Wed, Jan 6, 2010 at 19:42, David Chaplin-Loebell <di...@klatha.com> wrote:
> Hi,
>
> I'm trying to update my rules with sa-update, and it is failing:
>
> deliver3# sa-update -D
> [98652] dbg: logger: adding facilities: all
> [98652] dbg: logger: logging level is DBG
> [98652] dbg: generic: SpamAssassin version 3.2.5
> [98652] dbg: config: score set 0 chosen.
> [98652] dbg: dns: is Net::DNS::Resolver available? yes
> [98652] dbg: dns: Net::DNS version: 0.65
> [98652] dbg: generic: sa-update version svn607589
> [98652] dbg: generic: using update directory: /var/db/spamassassin/3.002005
> [98652] dbg: diag: perl platform: 5.008009 freebsd
> <snip - let me know if something in here is relevant, just trying to make a
> shorter message>
> [98652] dbg: channel: no MIRRORED.BY file available
> [98652] dbg: http: GET request,
> http://spamassassin.apache.org/updates/MIRRORED.BY
> [98652] dbg: channel: MIRRORED.BY file retrieved
> [98652] dbg: channel: reading MIRRORED.BY file
> [98652] dbg: channel: found mirror http://daryl.dostech.ca/sa-update/asf/
> weight=5
> [98652] dbg: channel: found mirror http://www.sa-update.pccc.com/ weight=5
> [98652] dbg: channel: selected mirror http://daryl.dostech.ca/sa-update/asf
> [98652] dbg: http: GET request,
> http://daryl.dostech.ca/sa-update/asf/895075.tar.gz
> [98652] dbg: http: GET request,
> http://daryl.dostech.ca/sa-update/asf/895075.tar.gz.sha1
> [98652] dbg: http: GET request,
> http://daryl.dostech.ca/sa-update/asf/895075.tar.gz.asc
> [98652] dbg: sha1: verification wanted:
> ade9426b8f85bed554604033c71e925e5e597502
> [98652] dbg: sha1: verification result:
> b3fa2495f0091f85a8421b39c72b868afef6808f
> channel: SHA1 verification failed, channel failed
> [98652] dbg: generic: cleaning up temporary directory/files
> [98652] dbg: diag: updates complete, exiting with code 4
>
> I searched the list archives for the SHA1 verification error, and found
> nothing recent-- is this problem somehow unique to my system?  Any
> suggestions?
>
> Thanks,
> David Chaplin-Loebell
>
>



-- 
--j.