summaryrefslogtreecommitdiff
path: root/exe
diff options
context:
space:
mode:
authorThe Bundler Bot <bot@bundler.io>2016-11-19 03:52:58 +0000
committerThe Bundler Bot <bot@bundler.io>2016-11-19 03:52:58 +0000
commitd46522577ff6b09909d6113db3cd9ff059a45445 (patch)
tree49b63f7cd7d6c8817f9fb321a991f1508ce8b4cd /exe
parentda2dc28fc3070475a4f258cabfa4a054d0e88a37 (diff)
parentda6dcf4c2f89cfc6b15f1078104c2929fb2ef954 (diff)
downloadbundler-d46522577ff6b09909d6113db3cd9ff059a45445.tar.gz
Auto merge of #5119 - hmistry:explain-checksum-mismatch, r=segiddins
Improve gem checksum mismatch error message Improve gem checksum mismatch error message by telling users how to resolve it. Old message: ``` The checksum for the downloaded `rack-1.0.0.gem` did not match the checksum given by the API. This means that the contents of the gem appear to be different from what was uploaded, and could be an indicator of a security issue. (The expected SHA256 checksum was "abababababababababababababababababababababab", but the checksum for the downloaded gem was "BR6Oc6Gqnq93u1aIVX4m6DvTHaFgFxdYaLUfa4ekJKI=".) Bundler cannot continue installing rack (1.0.0). ``` New message: ``` Bundler cannot continue installing rack (1.0.0). The checksum for the downloaded `rack-1.0.0.gem` does not match the checksum given by the server. This means the contents of the downloaded gem is different from what was uploaded to the server, and could be a potential security issue. To resolve this issue: 1. delete the downloaded gem located at: `full-path/gems/rack-1.0.0/rack-1.0.0.gem` 2. run `bundle install` If you wish to continue installing the downloaded gem, and are certain it does not pose a security issue despite the mismatching checksum, do the following: 1. run `bundle config disable.checksum_validaiton true` to turn off checksum verification 2. run `bundle install` (More info: The expected SHA256 checksum was "abababababababababababababababababababababab", but the checksum for the downloaded gem was "PbfaoemSetv76QdcxuoP0ggZ0TZhMELlMMWURJoX+dw=".) ``` Closes #5075
Diffstat (limited to 'exe')
0 files changed, 0 insertions, 0 deletions