Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Issue pulling as a Go Module #53

Open
aka-mj opened this issue Jul 29, 2020 · 7 comments
Open

Issue pulling as a Go Module #53

aka-mj opened this issue Jul 29, 2020 · 7 comments
Labels

Comments

@aka-mj
Copy link

aka-mj commented Jul 29, 2020

When running go get -u gopkg.in/h2non/gentleman.v2 I get the following error:

> go get -u gopkg.in/h2non/gentleman.v2
go: downloading gopkg.in/h2non/gentleman.v2 v2.0.4
go get gopkg.in/h2non/gentleman.v2: gopkg.in/h2non/[email protected]: verifying module: checksum mismatch
        downloaded: h1:Qq4Sk2jY7GoYBu8C5rZF/+RU9GdcnzPN9v3z5aBBGg8=
        sum.golang.org: h1:9R3K6CFYd/RdXDLi0pGXwaPnRx/pn5EZlrN3VkNygWc=

SECURITY ERROR
This download does NOT match the one reported by the checksum server.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.

For more information, see 'go help module-auth'.
Exception: go exited with 1
[tty 27], line 1: go get -u gopkg.in/h2non/gentleman.v2

I'm able to pull down other modules. Any ideas?
Using Go version 1.14.

@h2non
Copy link
Owner

h2non commented Jul 29, 2020

You can try with: go get -u github.com/h2non/gentleman

@h2non h2non added the question label Jul 29, 2020
@oxy-gendotmobi
Copy link

Same problem with:
go get -u gopkg.in/h2non/gentleman.v2/plugins/timeout
go: downloading gopkg.in/h2non/gentleman.v2 v2.0.4
verifying gopkg.in/h2non/[email protected]: checksum mismatch

@oxy-gendotmobi
Copy link

Your suggestion won't work either.
$ go get -u github.com/h2non/gentleman
go: downloading github.com/h2non/gentleman v1.0.4
go: downloading github.com/h2non/gentleman v2.0.4+incompatible
go: github.com/h2non/gentleman upgrade => v2.0.4+incompatible
go: downloading gopkg.in/h2non/gentleman.v2 v2.0.4
verifying gopkg.in/h2non/[email protected]: checksum mismatch

@swsnider
Copy link

We're having this issue as well when GOPROXY="direct". @h2non did you republish 2.0.4?

@rgci
Copy link

rgci commented Sep 29, 2020

We're having this issue as well when GOPROXY="direct". @h2non did you republish 2.0.4?

Seems like it. Diffed the two versions and got this change:

--- vendor/gopkg.in/h2non/gentleman.v2/.travis.yml (Qq4Sk2jY7GoYBu8C5rZF/+RU9GdcnzPN9v3z5aBBGg8=)
+++ /tmp/vendor/gopkg.in/h2non/gentleman.v2/.travis.yml (9R3K6CFYd/RdXDLi0pGXwaPnRx/pn5EZlrN3VkNygWc=)
@@ -1,6 +1,4 @@
 language: go
-
-go_import_path: gopkg.in/h2non/gentleman.v2
 
 go:
   - "1.13"

@bytheway
Copy link

bytheway commented Feb 1, 2021

I just ran into this, still seems to be an issue with sums getting cached places. Could you possibly tag a new version so this mismatch issue doesn't get in the way of the module verification?

@h2non
Copy link
Owner

h2non commented Feb 2, 2021

v2.0.5 tag was released.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

6 participants