[Building Sakai] Checksum errors with maven 2.2.1

[Matthew Buckett]

On 14 March 2012 15:55, Matthew Jones <matthew at longsight.com> wrote:
> So the checksum here is in the maven-metadata.xml.sha1 file
> as 'd51fee98f1fb817d8471e67c4ac2239e9a72ee1d'.
>
> https://oss.sonatype.org/content/repositories/snapshots/org/sakaiproject/entitybroker/entitybroker-api/1.6-SNAPSHOT/
>
> If I use this page
> http://hash.online-convert.com/sha1-generator
> with the url
> https://oss.sonatype.org/content/repositories/snapshots/org/sakaiproject/entitybroker/entitybroker-api/1.6-SNAPSHOT/maven-metadata.xml
>
> Then the hash comes out as expected. So it *appears* to me that the local
> hash is incorrect for whatever reason and the hash on the server is correct.
> I can't see where it's calculating that value from.
>
> This latest entitybroker snapshot is around 2 days old.

If I go to the entitybroker/util folder for trunk as this depends on
the API so should check to see if there are any new versions of the
API:

[INFO] snapshot
org.sakaiproject.entitybroker:entitybroker-api:1.6-SNAPSHOT: checking
for updates from sonatype-nexus-snapshots
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'7138e9c8bf5e6f10d9481073bd179770708ae39c'; remote =
'd51fee98f1fb817d8471e67c4ac2239e9a72ee1d' - RETRYING
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'7138e9c8bf5e6f10d9481073bd179770708ae39c'; remote =
'd51fee98f1fb817d8471e67c4ac2239e9a72ee1d' - IGNORING

Looking in the maven repo:

buckett at macbook:~/.m2/repository/org/sakaiproject/entitybroker/entitybroker-api/1.6-SNAPSHOT$
shasum maven-metadata-sonatype-nexus-snapshots.xml
7138e9c8bf5e6f10d9481073bd179770708ae39c
maven-metadata-sonatype-nexus-snapshots.xml
buckett at macbook:~/.m2/repository/org/sakaiproject/entitybroker/entitybroker-api/1.6-SNAPSHOT$
cat !$
cat maven-metadata-sonatype-nexus-snapshots.xml
<?xml version="1.0" encoding="UTF-8"?>
<metadata>
  <groupId>org.sakaiproject.entitybroker</groupId>
  <artifactId>entitybroker-api</artifactId>
  <version>1.6-SNAPSHOT</version>
  <versioning>
    <snapshot>
      <timestamp>20120312.183226</timestamp>
      <buildNumber>13</buildNumber>
    </snapshot>
    <lastUpdated>20120312183226</lastUpdated>
  </versioning>
</metadata>
buckett at macbook:~/.m2/repository/org/sakaiproject/entitybroker/entitybroker-api/1.6-SNAPSHOT$
cat maven-metadata-sonatype-nexus-snapshots.xml.sha1
1309956f6478e7e43f310b53eb5e8de44f9a8679

Which doesn't look right... the sha1 doesn't match in my local repo.

The Sonatype repo has:

curl -s https://oss.sonatype.org/content/repositories/snapshots/org/sakaiproject/entitybroker/entitybroker-api/1.6-SNAPSHOT/maven-metadata.xml
| shasum
d51fee98f1fb817d8471e67c4ac2239e9a72ee1d  -

which matches:

curl -s https://oss.sonatype.org/content/repositories/snapshots/org/sakaiproject/entitybroker/entitybroker-api/1.6-SNAPSHOT/maven-metadata.xml.sha1
d51fee98f1fb817d8471e67c4ac2239e9a72ee1d

-- 
  Matthew Buckett
  VLE Developer, LTG, Oxford University Computing Services