samhain fails source verification (Bug #106)

samhain¶

SOURCE_URL: http://la-samhna.de/samhain/samhain-current.tar.gz http://la-samhna.de/samhain/samhain-current.tar.gz
WEBSITE: samhain: http://la-samhna.de/samhain/
SHORT: samhain: A file integrity daemon with support for centralized monitoring

Error:¶

samhain : Getting sources ... 
--2011-08-28 19:04:07-- http://la-samhna.de/samhain/samhain-current.tar.gz 
Resolving la-samhna.de (la-samhna.de)... 83.133.121.189 
Connecting to la-samhna.de (la-samhna.de)|83.133.121.189|:80... connected. 
HTTP request sent, awaiting response... 200 OK 
Length: 2071630 (2.0M) [application/x-gzip] 
Saving to: `samhain-current.tar.gz' 

100%[==================================================================================================>] 2,071,630 594K/s in 3.4s 

2011-08-28 19:04:11 (594 KB/s) - `samhain-current.tar.gz' saved [2071630/2071630] 

 Checking ... 
GPG checking source file samhain-2.7.2c.tar.gz ... 
 Problem: samhain-2.7.2c.tar.gz.asc: file not found in spell hierarchy.
AHHH!!! Signature file not found
Failure to verify gpg signature
Abort? [y] 
 FAILED.
rm: cannot remove `/var/spool/sorcery/samhain-2.7.2c.tar.gz': No such file or directory
rm: cannot remove `/var/spool/sorcery/samhain-2.7.2c.tar.gz.asc': No such file or directory
The following spells failed (1):
 samhain 

This one is pretty special. Code from DOWNLOAD file:

# They ship this as samhain-current.tar.gz, which contains
# samhain-$VERSION.tar.gz and samhain-$VERSION.tar.gz.asc.  So we tell the
# spell the regular source names, but use one extral $FULL_SOURCE var and this
# magic to tie the two together.

if [ -n "$FORCE_DOWNLOAD" ] ||
  [ ! -r $SOURCE_CACHE/$SOURCE ] || [ ! -r $SOURCE_CACHE/$SOURCE2 ]
then
  cd $SOURCE_CACHE                     &&
  rm -f $FULL_SOURCE $SOURCE $SOURCE2  &&
  wget $SOURCE_URL 2>&1                &&
  tar -xzf $FULL_SOURCE                &&
  rm $FULL_SOURCE
fi

But if we bump it to 2.8.5a everything should be fine once again.