You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by The Doctor <do...@doctor.nl2k.ab.ca> on 2018/11/30 20:17:19 UTC

openssl 1.1.1 , FreeBSd 11.2 and spamassassin-3.4.2_2

Just ran sa-update  using gnupg2

and got

channel: SHA512 verification failed, channel failed

Why did that happen?

-- 
Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@nl2k.ab.ca
Yahweh, Queen & country!Never Satan President Republic!Beware AntiChrist rising!
https://www.empire.kred/ROOTNK?t=94a1f39b  Look at Psalms 14 and 53 on Atheism
sMerry Christmas 2018 and Happy New Year 2019!!

Re: openssl 1.1.1 , FreeBSd 11.2 and spamassassin-3.4.2_2

Posted by Bill Cole <sa...@billmail.scconsult.com>.
On 30 Nov 2018, at 16:57, The Doctor wrote:

> On Fri, Nov 30, 2018 at 04:08:36PM -0500, Bill Cole wrote:
>> On 30 Nov 2018, at 15:17, The Doctor wrote:
>>
>>> Just ran sa-update  using gnupg2
>>>
>>> and got
>>>
>>> channel: SHA512 verification failed, channel failed
>>>
>>> Why did that happen?
>>
>> Because the SHA512 verification of an update file failed, causing the
>> channel to fail. Just like it says.
>>
>> If you give sa-update the "-D" option, you will get a verbose
>> description of everything sa-update is doing, which will make more
>> useful details regarding the failure available. There is even a 
>> strong
>> chance that a second attempt will not fail, since some known failure
>> modes are inherently transient.
>>
>
> I will stick with what you said
>
> sa-update -D

[...]

Looks normal until near the end:

> Nov 30 14:53:15.964 [74107] dbg: channel: selected mirror 
> http://sa-update.spamassassin.org
> Nov 30 14:53:15.964 [74107] dbg: http: url: 
> http://sa-update.spamassassin.org/1847701.tar.gz
> Nov 30 14:53:15.964 [74107] dbg: http: downloading to: 
> /var/db/spamassassin/3.004002/updates_spamassassin_org/1847701.tar.gz, 
> update
> Nov 30 14:53:15.964 [74107] dbg: util: executable for curl was found 
> at /usr/local/bin/curl
> Nov 30 14:53:15.965 [74107] dbg: http: /usr/local/bin/curl -s -L -O 
> --remote-time -g --max-redirs 2 --connect-timeout 30 --max-time 300 
> --fail -o 1847701.tar.gz -z 1847701.tar.gz -- 
> http://sa-update.spamassassin.org/1847701.tar.gz
> Nov 30 14:53:18.418 [74107] dbg: http: process [74232], exit status: 
> exit 0
> Nov 30 14:53:18.420 [74107] dbg: http: url: 
> http://sa-update.spamassassin.org/1847701.tar.gz.sha512
> Nov 30 14:53:18.420 [74107] dbg: http: downloading to: 
> /var/db/spamassassin/3.004002/updates_spamassassin_org/1847701.tar.gz.sha512, 
> update
> Nov 30 14:53:18.421 [74107] dbg: util: executable for curl was found 
> at /usr/local/bin/curl
> Nov 30 14:53:18.421 [74107] dbg: http: /usr/local/bin/curl -s -L -O 
> --remote-time -g --max-redirs 2 --connect-timeout 30 --max-time 300 
> --fail -o 1847701.tar.gz.sha512 -z 1847701.tar.gz.sha512 -- 
> http://sa-update.spamassassin.org/1847701.tar.gz.sha512
> Nov 30 14:53:20.259 [74107] dbg: http: process [74286], exit status: 
> exit 0
> Nov 30 14:53:20.260 [74107] dbg: http: url: 
> http://sa-update.spamassassin.org/1847701.tar.gz.sha256
> Nov 30 14:53:20.260 [74107] dbg: http: downloading to: 
> /var/db/spamassassin/3.004002/updates_spamassassin_org/1847701.tar.gz.sha256, 
> update
> Nov 30 14:53:20.260 [74107] dbg: util: executable for curl was found 
> at /usr/local/bin/curl
> Nov 30 14:53:20.260 [74107] dbg: http: /usr/local/bin/curl -s -L -O 
> --remote-time -g --max-redirs 2 --connect-timeout 30 --max-time 300 
> --fail -o 1847701.tar.gz.sha256 -z 1847701.tar.gz.sha256 -- 
> http://sa-update.spamassassin.org/1847701.tar.gz.sha256
> Nov 30 14:53:22.161 [74107] dbg: http: process [74329], exit status: 
> exit 0
> Nov 30 14:53:22.162 [74107] dbg: http: url: 
> http://sa-update.spamassassin.org/1847701.tar.gz.asc
> Nov 30 14:53:22.162 [74107] dbg: http: downloading to: 
> /var/db/spamassassin/3.004002/updates_spamassassin_org/1847701.tar.gz.asc, 
> update
> Nov 30 14:53:22.163 [74107] dbg: util: executable for curl was found 
> at /usr/local/bin/curl
> Nov 30 14:53:22.163 [74107] dbg: http: /usr/local/bin/curl -s -L -O 
> --remote-time -g --max-redirs 2 --connect-timeout 30 --max-time 300 
> --fail -o 1847701.tar.gz.asc -z 1847701.tar.gz.asc -- 
> http://sa-update.spamassassin.org/1847701.tar.gz.asc
> Nov 30 14:53:23.603 [74107] dbg: http: process [74380], exit status: 
> exit 0
> Nov 30 14:53:23.607 [74107] dbg: sha512: verification wanted: 
> ae6c6249e8a63d4512331ec91e42bf0ba6ead2f8ba323200ebbfe4ed44bf9902635c7ecc7a3b392bdaddc96f070f8fd0293475dace317923854a32ba5238d93d

That's the content of the downloaded 1847701.tar.gz.sha512 file, which 
is the SHA512 hash of the 1847701.tar.gz on the update servers. It 
matches the content of the same file that I just retrieved from the 
update server, so your transfer of that file worked.

> Nov 30 14:53:23.607 [74107] dbg: sha512: verification result: 
> 88fd9fa22e55c00365b8d0548a7ce8fc8c5ac08c339ca383663b5b735337b2ef2a52a83021b6608f186b4163556a8b8d9ecef14c775717294607925577a0dd9f

That's the actual SHA512 hash of the downloaded 1847701.tar.gz file. 
Obviously it does not match the hash of that file on the server, so 
there was something wrong with the download. I've just downloaded 
1847701.tar.gz myself from the same server and verified that my 
downloaded DID verify, unpack correctly, and match what sa-update 
installed for me last night, so the problem is not with the files on the 
server but rather specifically with the download process or storage on 
your system resulting in a corrupted 1847701.tar.gz file.

When the channel fails to verify, sa-update refrains from deleting any 
downloaded files for an update channel if the channel fails. As 
indicated above, those were all downloaded to 
/var/db/spamassassin/3.004002/updates_spamassassin_org/ and so should 
still be present. Check the size of the 1847701.tar.gz file in that 
directory: it should be 289242 bytes. If the file is very short, it may 
contain an error message from the update server (or interfering device 
like a 'transparent' proxy) which could illuminate the problem.

Because the 1847701.tar.gz file was already present on your system, 
sa-update used the '-z' option on curl to avoid re-downloading the same 
file. However, in some circumstances that can result in a bad file from 
a failed update blocking retrieval of new files until the next day (when 
the server has a new update.) To get around that issue, 'rm 
/var/db/spamassassin/3.004002/updates_spamassassin_org/1847701.tar.gz*' 
and try sa-update again.



-- 
Bill Cole
bill@scconsult.com or billcole@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Available For Hire: https://linkedin.com/in/billcole

Re: openssl 1.1.1 , FreeBSd 11.2 and spamassassin-3.4.2_2

Posted by John Hardin <jh...@impsec.org>.
On Sat, 1 Dec 2018, Bill Cole wrote:

> On 1 Dec 2018, at 9:35, Matus UHLAR - fantomas wrote:
>
>> On 30.11.18 14:57, The Doctor wrote:
>>> Nov 30 14:53:15.964 [74107] dbg: channel: selected mirror 
>>> http://sa-update.spamassassin.org
>>> Nov 30 14:53:15.964 [74107] dbg: http: url: 
>>> http://sa-update.spamassassin.org/1847701.tar.gz
>>> Nov 30 14:53:15.964 [74107] dbg: http: downloading to: 
>>> /var/db/spamassassin/3.004002/updates_spamassassin_org/1847701.tar.gz, 
>>> update
>
> [...]
>> I have notices this problem repeatedly, usually findint out that the
>> downloaded file was one byte long.
>
> Or sometimes a few lines of web server error messaging...

How difficult would it be to detect that and include it in the logging?

-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   Maxim IX: Never turn your back on an enemy.
-----------------------------------------------------------------------
  611 days since the first commercial re-flight of an orbital booster (SpaceX)

Re: openssl 1.1.1 , FreeBSd 11.2 and spamassassin-3.4.2_2

Posted by Bill Cole <sa...@billmail.scconsult.com>.
On 1 Dec 2018, at 9:35, Matus UHLAR - fantomas wrote:

> On 30.11.18 14:57, The Doctor wrote:
>> Nov 30 14:53:15.964 [74107] dbg: channel: selected mirror 
>> http://sa-update.spamassassin.org
>> Nov 30 14:53:15.964 [74107] dbg: http: url: 
>> http://sa-update.spamassassin.org/1847701.tar.gz
>> Nov 30 14:53:15.964 [74107] dbg: http: downloading to: 
>> /var/db/spamassassin/3.004002/updates_spamassassin_org/1847701.tar.gz, 
>> update

[...]
> I have notices this problem repeatedly, usually findint out that the
> downloaded file was one byte long.

Or sometimes a few lines of web server error messaging...

> Can you check the size of /tmp/1847701.tar.gz when that happens?

Note that the file isn't likely to be in /tmp/ or have that name...

As shown above, the rule tarball is downloaded into the channel 
directory and in the case of the standard ruleset the base filename is a 
number which matched the SVN revision number for the enclosed files, 
which is supposed to change every day.

Re: openssl 1.1.1 , FreeBSd 11.2 and spamassassin-3.4.2_2

Posted by Matus UHLAR - fantomas <uh...@fantomas.sk>.
On 30.11.18 14:57, The Doctor wrote:
>Nov 30 14:53:15.964 [74107] dbg: channel: selected mirror http://sa-update.spamassassin.org
>Nov 30 14:53:15.964 [74107] dbg: http: url: http://sa-update.spamassassin.org/1847701.tar.gz
>Nov 30 14:53:15.964 [74107] dbg: http: downloading to: /var/db/spamassassin/3.004002/updates_spamassassin_org/1847701.tar.gz, update
>Nov 30 14:53:15.964 [74107] dbg: util: executable for curl was found at /usr/local/bin/curl
>Nov 30 14:53:15.965 [74107] dbg: http: /usr/local/bin/curl -s -L -O --remote-time -g --max-redirs 2 --connect-timeout 30 --max-time 300 --fail -o 1847701.tar.gz -z 1847701.tar.gz -- http://sa-update.spamassassin.org/1847701.tar.gz
>Nov 30 14:53:18.418 [74107] dbg: http: process [74232], exit status: exit 0
>Nov 30 14:53:18.420 [74107] dbg: http: url: http://sa-update.spamassassin.org/1847701.tar.gz.sha512
>Nov 30 14:53:18.420 [74107] dbg: http: downloading to: /var/db/spamassassin/3.004002/updates_spamassassin_org/1847701.tar.gz.sha512, update
>Nov 30 14:53:18.421 [74107] dbg: util: executable for curl was found at /usr/local/bin/curl
>Nov 30 14:53:18.421 [74107] dbg: http: /usr/local/bin/curl -s -L -O --remote-time -g --max-redirs 2 --connect-timeout 30 --max-time 300 --fail -o 1847701.tar.gz.sha512 -z 1847701.tar.gz.sha512 -- http://sa-update.spamassassin.org/1847701.tar.gz.sha512
>Nov 30 14:53:20.259 [74107] dbg: http: process [74286], exit status: exit 0
>Nov 30 14:53:20.260 [74107] dbg: http: url: http://sa-update.spamassassin.org/1847701.tar.gz.sha256
>Nov 30 14:53:20.260 [74107] dbg: http: downloading to: /var/db/spamassassin/3.004002/updates_spamassassin_org/1847701.tar.gz.sha256, update
>Nov 30 14:53:20.260 [74107] dbg: util: executable for curl was found at /usr/local/bin/curl
>Nov 30 14:53:20.260 [74107] dbg: http: /usr/local/bin/curl -s -L -O --remote-time -g --max-redirs 2 --connect-timeout 30 --max-time 300 --fail -o 1847701.tar.gz.sha256 -z 1847701.tar.gz.sha256 -- http://sa-update.spamassassin.org/1847701.tar.gz.sha256
>Nov 30 14:53:22.161 [74107] dbg: http: process [74329], exit status: exit 0
>Nov 30 14:53:22.162 [74107] dbg: http: url: http://sa-update.spamassassin.org/1847701.tar.gz.asc
>Nov 30 14:53:22.162 [74107] dbg: http: downloading to: /var/db/spamassassin/3.004002/updates_spamassassin_org/1847701.tar.gz.asc, update
>Nov 30 14:53:22.163 [74107] dbg: util: executable for curl was found at /usr/local/bin/curl
>Nov 30 14:53:22.163 [74107] dbg: http: /usr/local/bin/curl -s -L -O --remote-time -g --max-redirs 2 --connect-timeout 30 --max-time 300 --fail -o 1847701.tar.gz.asc -z 1847701.tar.gz.asc -- http://sa-update.spamassassin.org/1847701.tar.gz.asc
>Nov 30 14:53:23.603 [74107] dbg: http: process [74380], exit status: exit 0
>Nov 30 14:53:23.607 [74107] dbg: sha512: verification wanted: ae6c6249e8a63d4512331ec91e42bf0ba6ead2f8ba323200ebbfe4ed44bf9902635c7ecc7a3b392bdaddc96f070f8fd0293475dace317923854a32ba5238d93d
>Nov 30 14:53:23.607 [74107] dbg: sha512: verification result: 88fd9fa22e55c00365b8d0548a7ce8fc8c5ac08c339ca383663b5b735337b2ef2a52a83021b6608f186b4163556a8b8d9ecef14c775717294607925577a0dd9f
>channel: SHA512 verification failed, channel failed
>Nov 30 14:53:23.608 [74107] dbg: generic: cleaning up temporary directory/files
>Nov 30 14:53:23.608 [74107] dbg: generic: cleaning directory /tmp/.spamassassin74107u75Bvytmp
>Nov 30 14:53:23.608 [74107] dbg: diag: updates complete, exiting with code 4
>
>sa-update
>channel: SHA512 verification failed, channel failed


I have notices this problem repeatedly, usually findint out that the
downloaded file was one byte long.

Can you check the size of /tmp/1847701.tar.gz when that happens?

-- 
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Microsoft dick is soft to do no harm

Re: openssl 1.1.1 , FreeBSd 11.2 and spamassassin-3.4.2_2

Posted by The Doctor <do...@doctor.nl2k.ab.ca>.
On Fri, Nov 30, 2018 at 04:08:36PM -0500, Bill Cole wrote:
> On 30 Nov 2018, at 15:17, The Doctor wrote:
> 
> > Just ran sa-update  using gnupg2
> >
> > and got
> >
> > channel: SHA512 verification failed, channel failed
> >
> > Why did that happen?
> 
> Because the SHA512 verification of an update file failed, causing the 
> channel to fail. Just like it says.
> 
> If you give sa-update the "-D" option, you will get a verbose 
> description of everything sa-update is doing, which will make more 
> useful details regarding the failure available. There is even a strong 
> chance that a second attempt will not fail, since some known failure 
> modes are inherently transient.
>

I will stick with what you said

sa-update -D
Nov 30 14:53:12.329 [74107] dbg: logger: adding facilities: all
Nov 30 14:53:12.329 [74107] dbg: logger: logging level is DBG
Nov 30 14:53:12.329 [74107] dbg: generic: SpamAssassin version 3.4.2
Nov 30 14:53:12.329 [74107] dbg: generic: Perl 5.026002, PREFIX=/usr/local, DEF_RULES_DIR=/usr/local/share/spamassassin, LOCAL_RULES_DIR=/usr/local/etc/mail/spamassassin, LOCAL_STATE_DIR=/var/db/spamassassin
Nov 30 14:53:12.329 [74107] dbg: config: timing enabled
Nov 30 14:53:12.334 [74107] dbg: config: score set 0 chosen.
Nov 30 14:53:12.349 [74107] dbg: generic: sa-update version 3.4.2 / svn1840377
Nov 30 14:53:12.349 [74107] dbg: generic: using update directory: /var/db/spamassassin/3.004002
Nov 30 14:53:12.770 [74107] dbg: diag: perl platform: 5.026002 freebsd
Nov 30 14:53:12.770 [74107] dbg: diag: [...] module installed: Digest::SHA, version 5.96
Nov 30 14:53:12.770 [74107] dbg: diag: [...] module installed: HTML::Parser, version 3.72
Nov 30 14:53:12.770 [74107] dbg: diag: [...] module installed: Net::DNS, version 1.19
Nov 30 14:53:12.770 [74107] dbg: diag: [...] module installed: NetAddr::IP, version 4.079
Nov 30 14:53:12.770 [74107] dbg: diag: [...] module installed: Time::HiRes, version 1.9741
Nov 30 14:53:12.770 [74107] dbg: diag: [...] module installed: Archive::Tar, version 2.24
Nov 30 14:53:12.770 [74107] dbg: diag: [...] module installed: IO::Zlib, version 1.10
Nov 30 14:53:12.770 [74107] dbg: diag: [...] module installed: Digest::SHA1, version 2.13
Nov 30 14:53:12.770 [74107] dbg: diag: [...] module installed: MIME::Base64, version 3.15
Nov 30 14:53:12.771 [74107] dbg: diag: [...] module installed: DB_File, version 1.84
Nov 30 14:53:12.771 [74107] dbg: diag: [...] module installed: Net::SMTP, version 3.10
Nov 30 14:53:12.771 [74107] dbg: diag: [...] module installed: Mail::SPF, version v2.009
Nov 30 14:53:12.771 [74107] dbg: diag: [...] module installed: Geo::IP, version 1.51
Nov 30 14:53:12.771 [74107] dbg: diag: [...] module installed: Net::CIDR::Lite, version 0.21
Nov 30 14:53:12.771 [74107] dbg: diag: [...] module installed: Razor2::Client::Agent, version 2.84
Nov 30 14:53:12.771 [74107] dbg: diag: [...] module installed: IO::Socket::IP, version 0.38
Nov 30 14:53:12.771 [74107] dbg: diag: [...] module installed: IO::Socket::INET6, version 2.72
Nov 30 14:53:12.771 [74107] dbg: diag: [...] module installed: IO::Socket::SSL, version 2.060
Nov 30 14:53:12.771 [74107] dbg: diag: [...] module installed: Compress::Zlib, version 2.074
Nov 30 14:53:12.771 [74107] dbg: diag: [...] module installed: Mail::DKIM, version 0.54
Nov 30 14:53:12.771 [74107] dbg: diag: [...] module installed: DBI, version 1.642
Nov 30 14:53:12.771 [74107] dbg: diag: [...] module installed: Getopt::Long, version 2.49
Nov 30 14:53:12.771 [74107] dbg: diag: [...] module installed: LWP::UserAgent, version 6.36
Nov 30 14:53:12.771 [74107] dbg: diag: [...] module installed: HTTP::Date, version 6.02
Nov 30 14:53:12.771 [74107] dbg: diag: [...] module installed: Encode::Detect::Detector, version 1.01
Nov 30 14:53:12.771 [74107] dbg: diag: [...] module installed: Net::Patricia, version 1.22
Nov 30 14:53:12.772 [74107] dbg: diag: [...] module installed: Net::DNS::Nameserver, version 1692
Nov 30 14:53:12.772 [74107] dbg: diag: [...] module installed: BSD::Resource, version 1.2911
Nov 30 14:53:12.773 [74107] dbg: gpg: Searching for 'gpg'
Nov 30 14:53:12.774 [74107] dbg: util: current PATH is: /sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin:/root/bin
Nov 30 14:53:12.774 [74107] dbg: util: executable for gpg was found at /usr/local/bin/gpg
Nov 30 14:53:12.774 [74107] dbg: gpg: found /usr/local/bin/gpg
Nov 30 14:53:12.782 [74107] dbg: gpg: importing default keyring to /usr/local/etc/mail/spamassassin/sa-update-keys
Nov 30 14:53:12.797 [74107] dbg: gpg: [GNUPG:] IMPORT_OK 0 5E541DC959CB8BAC7C78DFDC4056A61A5244EC45
Nov 30 14:53:12.797 [74107] dbg: gpg: [GNUPG:] IMPORT_RES 1 0 0 0 1 0 0 0 0 0 0 0 0 0 0
Nov 30 14:53:12.797 [74107] dbg: gpg: release trusted key id list: 0C2B1D7175B852C64B3CDC716C55397824F434CE 5E541DC959CB8BAC7C78DFDC4056A61A5244EC45
Nov 30 14:53:12.808 [74107] dbg: util: secure_tmpfile created a temporary file /tmp/.spamassassin74107JqCXOVtmp
Nov 30 14:53:12.808 [74107] dbg: channel: attempting channel updates.spamassassin.org
Nov 30 14:53:12.808 [74107] dbg: channel: using existing directory /var/db/spamassassin/3.004002/updates_spamassassin_org
Nov 30 14:53:12.808 [74107] dbg: channel: channel cf file /var/db/spamassassin/3.004002/updates_spamassassin_org.cf
Nov 30 14:53:12.808 [74107] dbg: channel: channel pre file /var/db/spamassassin/3.004002/updates_spamassassin_org.pre
Nov 30 14:53:14.133 [74107] dbg: dns: 2.4.3.updates.spamassassin.org => 1847701, parsed as 1847701
Nov 30 14:53:14.133 [74107] dbg: channel: preparing temp directory for new channel
Nov 30 14:53:14.134 [74107] dbg: channel: created tmp directory /tmp/.spamassassin74107u75Bvytmp
Nov 30 14:53:14.134 [74107] dbg: generic: lint checking site pre files once before attempting channel updates
Nov 30 14:53:14.134 [74107] dbg: generic: SpamAssassin version 3.4.2
Nov 30 14:53:14.134 [74107] dbg: generic: Perl 5.026002, PREFIX=/usr/local, DEF_RULES_DIR=/usr/local/share/spamassassin, LOCAL_RULES_DIR=/usr/local/etc/mail/spamassassin, LOCAL_STATE_DIR=/var/db/spamassassin
Nov 30 14:53:14.134 [74107] dbg: config: timing enabled
Nov 30 14:53:14.139 [74107] dbg: config: score set 0 chosen.
Nov 30 14:53:14.149 [74107] dbg: ignore: using a test message to lint rules
Nov 30 14:53:14.149 [74107] dbg: config: using "/usr/local/etc/mail/spamassassin" for site rules pre files
Nov 30 14:53:14.150 [74107] dbg: config: read file /usr/local/etc/mail/spamassassin/init.pre
Nov 30 14:53:14.150 [74107] dbg: config: read file /usr/local/etc/mail/spamassassin/v310.pre
Nov 30 14:53:14.150 [74107] dbg: config: read file /usr/local/etc/mail/spamassassin/v312.pre
Nov 30 14:53:14.150 [74107] dbg: config: read file /usr/local/etc/mail/spamassassin/v320.pre
Nov 30 14:53:14.150 [74107] dbg: config: read file /usr/local/etc/mail/spamassassin/v330.pre
Nov 30 14:53:14.151 [74107] dbg: config: read file /usr/local/etc/mail/spamassassin/v340.pre
Nov 30 14:53:14.151 [74107] dbg: config: read file /usr/local/etc/mail/spamassassin/v341.pre
Nov 30 14:53:14.151 [74107] dbg: config: read file /usr/local/etc/mail/spamassassin/v342.pre
Nov 30 14:53:14.151 [74107] dbg: config: using "/tmp/.spamassassin74107u75Bvytmp/doesnotexist" for sys rules pre files
Nov 30 14:53:14.151 [74107] dbg: config: using "/tmp/.spamassassin74107u75Bvytmp/doesnotexist" for default rules dir
Nov 30 14:53:14.152 [74107] dbg: config: using "/tmp/.spamassassin74107u75Bvytmp/doesnotexist/doesnotexist" for user prefs file
Nov 30 14:53:14.153 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::RelayCountry from @INC
Nov 30 14:53:14.157 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
Nov 30 14:53:14.170 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
Nov 30 14:53:14.175 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
Nov 30 14:53:14.186 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::DCC from @INC
Nov 30 14:53:14.200 [74107] dbg: dcc: local tests only, disabling DCC
Nov 30 14:53:14.201 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::Pyzor from @INC
Nov 30 14:53:14.207 [74107] dbg: pyzor: local tests only, disabling Pyzor
Nov 30 14:53:14.207 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::Razor2 from @INC
Nov 30 14:53:14.212 [74107] dbg: razor2: local tests only, skipping Razor
Nov 30 14:53:14.213 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::SpamCop from @INC
Nov 30 14:53:14.218 [74107] dbg: reporter: local tests only, disabling SpamCop
Nov 30 14:53:14.219 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::AutoLearnThreshold from @INC
Nov 30 14:53:14.221 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::WhiteListSubject from @INC
Nov 30 14:53:14.224 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::MIMEHeader from @INC
Nov 30 14:53:14.227 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::ReplaceTags from @INC
Nov 30 14:53:14.230 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::DKIM from @INC
Nov 30 14:53:14.244 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::Check from @INC
Nov 30 14:53:14.262 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::HTTPSMismatch from @INC
Nov 30 14:53:14.264 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDetail from @INC
Nov 30 14:53:14.268 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::Bayes from @INC
Nov 30 14:53:14.293 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::BodyEval from @INC
Nov 30 14:53:14.298 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::DNSEval from @INC
Nov 30 14:53:14.304 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::HTMLEval from @INC
Nov 30 14:53:14.309 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::HeaderEval from @INC
Nov 30 14:53:14.327 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::MIMEEval from @INC
Nov 30 14:53:14.336 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::RelayEval from @INC
Nov 30 14:53:14.341 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIEval from @INC
Nov 30 14:53:14.343 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::WLBLEval from @INC
Nov 30 14:53:14.351 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::VBounce from @INC
Nov 30 14:53:14.354 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::ImageInfo from @INC
Nov 30 14:53:14.360 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::FreeMail from @INC
Nov 30 14:53:14.371 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::AskDNS from @INC
Nov 30 14:53:14.380 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::TxRep from @INC
Nov 30 14:53:14.397 [74107] dbg: TxRep: new object created
Nov 30 14:53:14.398 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::URILocalBL from @INC
Nov 30 14:53:14.980 [74107] dbg: plugin: loading Mail::SpamAssassin::Plugin::PDFInfo from @INC
Nov 30 14:53:14.992 [74107] dbg: config: finish parsing
Nov 30 14:53:14.992 [74107] dbg: plugin: Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x80e1152b8) implements 'finish_parsing_end', priority 0
Nov 30 14:53:14.992 [74107] dbg: plugin: Mail::SpamAssassin::Plugin::FreeMail=HASH(0x80de3e728) implements 'finish_parsing_end', priority 0
Nov 30 14:53:14.993 [74107] dbg: replacetags: replacing tags
Nov 30 14:53:14.993 [74107] dbg: replacetags: done replacing tags
Nov 30 14:53:14.993 [74107] dbg: FreeMail: no freemail_domains entries defined, disabling plugin
Nov 30 14:53:14.993 [74107] dbg: config: score set 0 chosen.
Nov 30 14:53:14.994 [74107] dbg: dns: EDNS, UDP payload size 4096
Nov 30 14:53:14.994 [74107] dbg: dns: servers obtained from Net::DNS : [204.209.81.1]:53, [204.209.81.3]:53, [8.8.8.8]:53
Nov 30 14:53:14.995 [74107] dbg: dns: nameservers set to 204.209.81.1, 204.209.81.3, 8.8.8.8
Nov 30 14:53:14.995 [74107] dbg: dns: using socket module: IO::Socket::IP version 0.38
Nov 30 14:53:14.995 [74107] dbg: dns: is Net::DNS::Resolver available? yes
Nov 30 14:53:14.995 [74107] dbg: dns: Net::DNS version: 1.19
Nov 30 14:53:14.995 [74107] dbg: config: time limit 300.0 s
Nov 30 14:53:14.996 [74107] dbg: message: main message type: text/plain
Nov 30 14:53:14.996 [74107] dbg: message: ---- MIME PARSER START ----
Nov 30 14:53:14.996 [74107] dbg: message: parsing normal part
Nov 30 14:53:14.996 [74107] dbg: message: storing a body to memory
Nov 30 14:53:14.996 [74107] dbg: message: ---- MIME PARSER END ----
Nov 30 14:53:14.997 [74107] dbg: check: pms new, time limit in 299.998 s
Nov 30 14:53:14.997 [74107] dbg: plugin: Mail::SpamAssassin::Plugin::DNSEval=HASH(0x80e460348) implements 'check_start', priority 0
Nov 30 14:53:14.999 [74107] dbg: check: using scoreset 0 in M:S:Pms
Nov 30 14:53:14.999 [74107] dbg: plugin: Mail::SpamAssassin::Plugin::Check=HASH(0x80de3e050) implements 'check_main', priority 0
Nov 30 14:53:15.000 [74107] dbg: config: trusted_networks are not configured; it is recommended that you configure trusted_networks manually
Nov 30 14:53:15.000 [74107] dbg: metadata: X-Spam-Relays-Trusted:
Nov 30 14:53:15.000 [74107] dbg: metadata: X-Spam-Relays-Untrusted:
Nov 30 14:53:15.000 [74107] dbg: metadata: X-Spam-Relays-Internal:
Nov 30 14:53:15.001 [74107] dbg: metadata: X-Spam-Relays-External:
Nov 30 14:53:15.001 [74107] dbg: plugin: Mail::SpamAssassin::Plugin::RelayCountry=HASH(0x80de3cda0) implements 'extract_metadata', priority 0
Nov 30 14:53:15.001 [74107] dbg: plugin: Mail::SpamAssassin::Plugin::AskDNS=HASH(0x80de3e980) implements 'extract_metadata', priority 0
Nov 30 14:53:15.001 [74107] dbg: metadata: RelayCountry: GeoIP.dat not found, IP::Country::Fast enabled as fallback
Nov 30 14:53:15.007 [74107] dbg: metadata: RelayCountry: Using database: IP::Country::Fast Wed May 15 09:29:48 2013
Nov 30 14:53:15.007 [74107] dbg: metadata: X-Relay-Countries:
Nov 30 14:53:15.007 [74107] dbg: dns: is DNS available? 0
Nov 30 14:53:15.007 [74107] dbg: check: tagrun - tag AUTHORDOMAIN is now ready, value: compiling.spamassassin.taint.org
Nov 30 14:53:15.008 [74107] dbg: check: tagrun - tag RELAYSTRUSTED is now ready, value:
Nov 30 14:53:15.008 [74107] dbg: check: tagrun - tag RELAYSUNTRUSTED is now ready, value:
Nov 30 14:53:15.008 [74107] dbg: check: tagrun - tag RELAYSINTERNAL is now ready, value:
Nov 30 14:53:15.008 [74107] dbg: check: tagrun - tag RELAYSEXTERNAL is now ready, value:
Nov 30 14:53:15.008 [74107] dbg: check: tagrun - tag LANGUAGES is now ready, value: <UNDEF>
Nov 30 14:53:15.008 [74107] dbg: message: no encoding detected
Nov 30 14:53:15.009 [74107] dbg: plugin: Mail::SpamAssassin::Plugin::RelayCountry=HASH(0x80de3cda0) implements 'parsed_metadata', priority 0
Nov 30 14:53:15.009 [74107] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x80de3fb58) implements 'parsed_metadata', priority 0
Nov 30 14:53:15.009 [74107] dbg: check: tagrun - tag RELAYCOUNTRY is now ready, value: ARY:[]
Nov 30 14:53:15.009 [74107] dbg: rules: local tests only, ignoring RBL eval
Nov 30 14:53:15.009 [74107] dbg: check: check_main, time limit in 299.986 s
Nov 30 14:53:15.018 [74107] dbg: dns: harvest_dnsbl_queries
Nov 30 14:53:15.019 [74107] dbg: plugin: Mail::SpamAssassin::Plugin::DCC=HASH(0x80de3cfb0) implements 'check_post_learn', priority 0
Nov 30 14:53:15.019 [74107] dbg: dcc: DCC learning not enabled by dcc_learn_score
Nov 30 14:53:15.020 [74107] dbg: check: is spam? score=0 required=5
Nov 30 14:53:15.020 [74107] dbg: check: tests=
Nov 30 14:53:15.020 [74107] dbg: check: subtests=
Nov 30 14:53:15.020 [74107] dbg: timing: total 869 ms - init: 846 (97.4%), parse: 1.54 (0.2%), extract_message_metadata: 9 (1.1%), get_uri_detail_list: 9 (1.0%)
Nov 30 14:53:15.021 [74107] dbg: plugin: Mail::SpamAssassin::Plugin::MIMEHeader=HASH(0x80de3d628) implements 'finish_tests', priority 0
Nov 30 14:53:15.021 [74107] dbg: plugin: Mail::SpamAssassin::Plugin::Check=HASH(0x80de3e050) implements 'finish_tests', priority 0
Nov 30 14:53:15.023 [74107] dbg: generic: lint check of site pre files succeeded, continuing with channel updates
Nov 30 14:53:15.023 [74107] dbg: channel: protocol family available: inet,inet6
Nov 30 14:53:15.024 [74107] dbg: channel: reading MIRRORED.BY file /var/db/spamassassin/3.004002/updates_spamassassin_org/MIRRORED.BY
Nov 30 14:53:15.024 [74107] dbg: channel: parsing MIRRORED.BY file for channel updates.spamassassin.org
Nov 30 14:53:15.024 [74107] dbg: channel: found mirror http://sa-update.dnswl.org/ weight=3
Nov 30 14:53:15.024 [74107] dbg: channel: found mirror http://www.sa-update.pccc.com/ weight=5
Nov 30 14:53:15.024 [74107] dbg: channel: found mirror http://sa-update.secnap.net/ weight=5
Nov 30 14:53:15.025 [74107] dbg: channel: found mirror http://sa-update.space-pro.be/ weight=1
Nov 30 14:53:15.025 [74107] dbg: channel: found mirror http://sa-update.ena.com/ weight=5
Nov 30 14:53:15.025 [74107] dbg: channel: found mirror http://sa-update.razx.cloud/ weight=5
Nov 30 14:53:15.025 [74107] dbg: channel: found mirror http://sa-update.fossies.org/ weight=1
Nov 30 14:53:15.025 [74107] dbg: channel: found mirror http://sa-update.verein-clean.net/ weight=10
Nov 30 14:53:15.025 [74107] dbg: channel: found mirror http://sa-update.bitwell.fi/ weight=5
Nov 30 14:53:15.026 [74107] dbg: channel: found mirror http://sa-update.spamassassin.org/ weight=10
Nov 30 14:53:15.964 [74107] dbg: channel: selected mirror http://sa-update.spamassassin.org
Nov 30 14:53:15.964 [74107] dbg: http: url: http://sa-update.spamassassin.org/1847701.tar.gz
Nov 30 14:53:15.964 [74107] dbg: http: downloading to: /var/db/spamassassin/3.004002/updates_spamassassin_org/1847701.tar.gz, update
Nov 30 14:53:15.964 [74107] dbg: util: executable for curl was found at /usr/local/bin/curl
Nov 30 14:53:15.965 [74107] dbg: http: /usr/local/bin/curl -s -L -O --remote-time -g --max-redirs 2 --connect-timeout 30 --max-time 300 --fail -o 1847701.tar.gz -z 1847701.tar.gz -- http://sa-update.spamassassin.org/1847701.tar.gz
Nov 30 14:53:18.418 [74107] dbg: http: process [74232], exit status: exit 0
Nov 30 14:53:18.420 [74107] dbg: http: url: http://sa-update.spamassassin.org/1847701.tar.gz.sha512
Nov 30 14:53:18.420 [74107] dbg: http: downloading to: /var/db/spamassassin/3.004002/updates_spamassassin_org/1847701.tar.gz.sha512, update
Nov 30 14:53:18.421 [74107] dbg: util: executable for curl was found at /usr/local/bin/curl
Nov 30 14:53:18.421 [74107] dbg: http: /usr/local/bin/curl -s -L -O --remote-time -g --max-redirs 2 --connect-timeout 30 --max-time 300 --fail -o 1847701.tar.gz.sha512 -z 1847701.tar.gz.sha512 -- http://sa-update.spamassassin.org/1847701.tar.gz.sha512
Nov 30 14:53:20.259 [74107] dbg: http: process [74286], exit status: exit 0
Nov 30 14:53:20.260 [74107] dbg: http: url: http://sa-update.spamassassin.org/1847701.tar.gz.sha256
Nov 30 14:53:20.260 [74107] dbg: http: downloading to: /var/db/spamassassin/3.004002/updates_spamassassin_org/1847701.tar.gz.sha256, update
Nov 30 14:53:20.260 [74107] dbg: util: executable for curl was found at /usr/local/bin/curl
Nov 30 14:53:20.260 [74107] dbg: http: /usr/local/bin/curl -s -L -O --remote-time -g --max-redirs 2 --connect-timeout 30 --max-time 300 --fail -o 1847701.tar.gz.sha256 -z 1847701.tar.gz.sha256 -- http://sa-update.spamassassin.org/1847701.tar.gz.sha256
Nov 30 14:53:22.161 [74107] dbg: http: process [74329], exit status: exit 0
Nov 30 14:53:22.162 [74107] dbg: http: url: http://sa-update.spamassassin.org/1847701.tar.gz.asc
Nov 30 14:53:22.162 [74107] dbg: http: downloading to: /var/db/spamassassin/3.004002/updates_spamassassin_org/1847701.tar.gz.asc, update
Nov 30 14:53:22.163 [74107] dbg: util: executable for curl was found at /usr/local/bin/curl
Nov 30 14:53:22.163 [74107] dbg: http: /usr/local/bin/curl -s -L -O --remote-time -g --max-redirs 2 --connect-timeout 30 --max-time 300 --fail -o 1847701.tar.gz.asc -z 1847701.tar.gz.asc -- http://sa-update.spamassassin.org/1847701.tar.gz.asc
Nov 30 14:53:23.603 [74107] dbg: http: process [74380], exit status: exit 0
Nov 30 14:53:23.607 [74107] dbg: sha512: verification wanted: ae6c6249e8a63d4512331ec91e42bf0ba6ead2f8ba323200ebbfe4ed44bf9902635c7ecc7a3b392bdaddc96f070f8fd0293475dace317923854a32ba5238d93d
Nov 30 14:53:23.607 [74107] dbg: sha512: verification result: 88fd9fa22e55c00365b8d0548a7ce8fc8c5ac08c339ca383663b5b735337b2ef2a52a83021b6608f186b4163556a8b8d9ecef14c775717294607925577a0dd9f
channel: SHA512 verification failed, channel failed
Nov 30 14:53:23.608 [74107] dbg: generic: cleaning up temporary directory/files
Nov 30 14:53:23.608 [74107] dbg: generic: cleaning directory /tmp/.spamassassin74107u75Bvytmp
Nov 30 14:53:23.608 [74107] dbg: diag: updates complete, exiting with code 4

sa-update
channel: SHA512 verification failed, channel failed


> 
> -- 
> Bill Cole
> bill@scconsult.com or billcole@apache.org
> (AKA @grumpybozo and many *@billmail.scconsult.com addresses)
> Available For Hire: https://linkedin.com/in/billcole

-- 
Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@nl2k.ab.ca
Yahweh, Queen & country!Never Satan President Republic!Beware AntiChrist rising!
https://www.empire.kred/ROOTNK?t=94a1f39b  Look at Psalms 14 and 53 on Atheism
sMerry Christmas 2018 and Happy New Year 2019!!

Re: openssl 1.1.1 , FreeBSd 11.2 and spamassassin-3.4.2_2

Posted by Bill Cole <sa...@billmail.scconsult.com>.
On 30 Nov 2018, at 15:17, The Doctor wrote:

> Just ran sa-update  using gnupg2
>
> and got
>
> channel: SHA512 verification failed, channel failed
>
> Why did that happen?

Because the SHA512 verification of an update file failed, causing the 
channel to fail. Just like it says.

If you give sa-update the "-D" option, you will get a verbose 
description of everything sa-update is doing, which will make more 
useful details regarding the failure available. There is even a strong 
chance that a second attempt will not fail, since some known failure 
modes are inherently transient.


-- 
Bill Cole
bill@scconsult.com or billcole@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Available For Hire: https://linkedin.com/in/billcole