Welcome to CRUX bug tracking.

FS#1763 - pkgmk -cs doesn't report error for missing files in .signature

Attached to Project: CRUX
Opened by li (phi) - Tuesday, 27 August 2019, 13:03 GMT
Last edited by Tim Biermann (tb) - Thursday, 24 June 2021, 11:32 GMT
Task Type Bug Report
Category tools → pkgutils
Status New
Assigned To CRUX Developers (crux)
Operating System CRUX
Severity Low
Priority Normal
Reported Version 3.5
Due in Version Undecided
Due Date Undecided
Percent Complete 0%
Votes 0
Private No


Some ports have incomplete file list in .signature. This is the case for opt/mplayer that its main source signature is missing, what makes it bad is that it's also using the insecure http protocol ($version.tar.xz).

cd to /usr/pors/opt/mplayer, pkgmk -cs shows that the signature is ok.

I suggest patch pkgmk to print out errors in such case and re-check all ports, I believe there're more ports affected by this issue.
This task depends upon