Failed to fetch package (hash sum mismatch)
maxjust opened this issue · comments
maxjust commented
#>go get github.com/fasthttp/router
go get github.com/fasthttp/router
go: github.com/fasthttp/router upgrade => v1.1.3
go: downloading github.com/fasthttp/router v1.1.3
go get: github.com/fasthttp/router@v1.1.3: verifying module: checksum mismatch
downloaded: h1:q042AM9cSgVNvpG1T+lMAiL1PXLcTs94n1pCDQ737ss=
sum.golang.org: h1:xxYAxTON68tX8pXwdw3cCPOYvKoXIbfrouBEuG6kFsk=
SECURITY ERROR
This download does NOT match the one reported by the checksum server.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.
maxjust commented
The promblem is not in go.sum. As I write before, problem with mismatch cache between downloaded package hash during install and published hash in sum.golang.org, in my opinion you publish wrong hash to sum.golang.org
go get: github.com/fasthttp/router@v1.1.3: verifying module: checksum mismatch
downloaded: h1:q042AM9cSgVNvpG1T+lMAiL1PXLcTs94n1pCDQ737ss=
sum.golang.org: h1:xxYAxTON68tX8pXwdw3cCPOYvKoXIbfrouBEuG6kFsk=
Sergio VS commented
I have installed the router v1.1.3 in my framework and i have the correct hash in the go.sum
https://github.com/savsgio/atreugo/blob/master/go.sum#L4
Try to remove the go.sum
, please.
maxjust commented
yes, you was right, removing the go.sum solved issue, thanks!