Bug 1211918 - digest verification errors with: openh264 on codecs.opensuse.org
Summary: digest verification errors with: openh264 on codecs.opensuse.org
Status: NEW
: 1212045 1212130 (view as bug list)
Alias: None
Product: openSUSE Distribution
Classification: openSUSE
Component: Other (show other bugs)
Version: Leap 15.4
Hardware: x86-64 openSUSE Leap 15.4
: P5 - None : Major (vote)
Target Milestone: ---
Assignee: Lubos Kocman
QA Contact: E-mail List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2023-06-01 13:48 UTC by andreas bittner
Modified: 2023-06-08 08:35 UTC (History)
4 users (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description andreas bittner 2023-06-01 13:48:01 UTC
sorry that I have never come to terms with this codecs stuff (back then with packan links2linus guys) but rather recently even with codecs.opensuse.org

tried to read

> <https://en.opensuse.org/OpenH264>

and come to terms with some basic installation and first steps after I had previously removed the two packages

gstreamer-1.20-plugin-openh264
and
mozilla-openh264

first ( i did have the codecs.opensuse.org repository added and these two packages (and their subpackages I guess) i removed these two packages and now I can not add them back in.

original goal is: to have somewhat "modern" video and audio codecs installed into opensuse leap 15.4 and not using packman at all. if thats even possible.

but then I have never managed to have h264 and mp4 stuff alive and checked and working on test webpages such as:

> <https://html5test.com/>
> <https://lab.html5test.com/codecs/>

i only have like ogg theora, webm vp8 and vp9 available it seems

now I do wonder why i can not add these packages back again as I am seeing digest verification failed errors.

---------------------

sudo zypper install --from repo-openh264 gstreamer-1.20-plugin-openh264
Loading repository data...
Reading installed packages...
Resolving package dependencies...

The following NEW package is going to be installed:
  gstreamer-1.20-plugin-openh264

1 new package to install.
Overall download size: 32.8 KiB. Already cached: 0 B. After the operation, additional 75.8 KiB will be used.
Continue? [y/n/v/...? shows all options] (y): y
Retrieving: gstreamer-1.20-plugin-openh264-1.20.3-1.sle150400.1.x86_64 (repo-openh264)                                                                                                                                               (1/1),  32.8 KiB    
Retrieving: gstreamer-1.20-plugin-openh264-1.20.3-1.sle150400.1.x86_64.rpm ........................................................................................................................................................................[done]

Warning: Digest verification failed for file 'gstreamer-1.20-plugin-openh264-1.20.3-1.sle150400.1.x86_64.rpm'
[/var/tmp/AP_0xolJD9x/x86_64/gstreamer-1.20-plugin-openh264-1.20.3-1.sle150400.1.x86_64.rpm]

  expected fdde40b4d9ecfdb1ff9163147374636219ce477c3030ee8301fb567bc2a64908
  but got  f2e32d56f99c079e399e5d4b88d46c9c8c1e0fdf4413e4c9cb2d76212a91b66a

Accepting packages with wrong checksums can lead to a corrupted system and in extreme cases even to a system compromise.

However if you made certain that the file with checksum 'f2e3..' is secure, correct
and should be used within this operation, enter the first 4 characters of the checksum
to unblock using this file on your own risk. Empty input will discard the file.

Unblock or discard? 

-------------------

sudo zypper install --from repo-openh264 mozilla-openh264
Loading repository data...
Reading installed packages...
Resolving package dependencies...

The following NEW package is going to be installed:
  mozilla-openh264

1 new package to install.
Overall download size: 436.5 KiB. Already cached: 0 B. After the operation, additional 1.4 MiB will be used.
Continue? [y/n/v/...? shows all options] (y): y
Retrieving: mozilla-openh264-2.3.1-2.sle150400.1.x86_64 (repo-openh264)                                                                                                                                                              (1/1), 436.5 KiB    
Retrieving: mozilla-openh264-2.3.1-2.sle150400.1.x86_64.rpm ..........................................................................................................................................................................[done (72.9 KiB/s)]

Warning: Digest verification failed for file 'mozilla-openh264-2.3.1-2.sle150400.1.x86_64.rpm'
[/var/tmp/AP_0xx56WUj/x86_64/mozilla-openh264-2.3.1-2.sle150400.1.x86_64.rpm]

  expected f4b4ca0daf808bf6653194e5520ca188dd20d21edf78efb334f23218104457c6
  but got  95716c93d3809cd580ae76af3fac292d344c13a751e46f3bdabe58ed39f6fe46

Accepting packages with wrong checksums can lead to a corrupted system and in extreme cases even to a system compromise.

However if you made certain that the file with checksum '9571..' is secure, correct
and should be used within this operation, enter the first 4 characters of the checksum
to unblock using this file on your own risk. Empty input will discard the file.

Unblock or discard?

---------------

is there amiss with the <https://codecs.opensuse.org/openh264/>  repository etc?
thanks for hints

also the firefox on my 15.4 leap has like only "half" (is missing a few) of those about:config settings for substring match of: gmp-gmpopenh264
Comment 1 Friedrich Haubensak 2023-06-03 15:39:54 UTC
these "Digest verification failed" errors also come up when doing a default install of leap 15.5 (installation on a desktop pc with "generic desktop" selected)

during install of leap 15.5, codecs.opensuse.org/openh264/openSUSE_Leap/ gets added to repo list as repo-openh264, and the system wants to install libopenh264-7 and mozilla-openh264 but can not...

Warning: Digest verification failed for file 'libopenh264-7-2.3.1-2.sle150400.1.x86_64.rpm'
[/var/tmp/AP_0xxfRSuD/x86_64/libopenh264-7-2.3.1-2.sle150400.1.x86_64.rpm]
  expected 96c48f3e38db45f3b64e5238a1c5fba48bf5fd65f3c77df4f67a51f69af5c86b
  but got  6846de9f41a88b3ffa2149abee4d4a2246df3229131318d77ae04b56a1e5399b

Warning: Digest verification failed for file 'mozilla-openh264-2.3.1-2.sle150400.1.x86_64.rpm'
[/var/tmp/AP_0x0dm2M5/x86_64/mozilla-openh264-2.3.1-2.sle150400.1.x86_64.rpm]
  expected f4b4ca0daf808bf6653194e5520ca188dd20d21edf78efb334f23218104457c6
  but got  95716c93d3809cd580ae76af3fac292d344c13a751e46f3bdabe58ed39f6fe46
Comment 2 Alex B. 2023-06-06 05:27:42 UTC
I see that too.

"Digest verification failed" on a fresh 15.5 install is an unpleasant one.
Comment 3 hui 2023-06-06 09:51:46 UTC
*** Bug 1212045 has been marked as a duplicate of this bug. ***
Comment 4 hui 2023-06-08 08:35:45 UTC
*** Bug 1212130 has been marked as a duplicate of this bug. ***