fasthttp / router

Router implementation for fasthttp

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Failed to fetch package (hash sum mismatch)

maxjust opened this issue · comments

#>go get github.com/fasthttp/router  
go get github.com/fasthttp/router
go: github.com/fasthttp/router upgrade => v1.1.3
go: downloading github.com/fasthttp/router v1.1.3
go get: github.com/fasthttp/router@v1.1.3: verifying module: checksum mismatch
        downloaded: h1:q042AM9cSgVNvpG1T+lMAiL1PXLcTs94n1pCDQ737ss=
        sum.golang.org: h1:xxYAxTON68tX8pXwdw3cCPOYvKoXIbfrouBEuG6kFsk=

SECURITY ERROR
This download does NOT match the one reported by the checksum server.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.

Hi @maxjust,

Remove the go.sum file and try go get again.

The promblem is not in go.sum. As I write before, problem with mismatch cache between downloaded package hash during install and published hash in sum.golang.org, in my opinion you publish wrong hash to sum.golang.org

go get: github.com/fasthttp/router@v1.1.3: verifying module: checksum mismatch
        downloaded: h1:q042AM9cSgVNvpG1T+lMAiL1PXLcTs94n1pCDQ737ss=
        sum.golang.org: h1:xxYAxTON68tX8pXwdw3cCPOYvKoXIbfrouBEuG6kFsk=

I have installed the router v1.1.3 in my framework and i have the correct hash in the go.sum
https://github.com/savsgio/atreugo/blob/master/go.sum#L4

Try to remove the go.sum, please.

yes, you was right, removing the go.sum solved issue, thanks!