SolarisDownloadCacher always error - Mismatched checksums

(imported topic written by SystemAdmin)

I’m trying to patch Solaris 8/9/10 servers. Since BES server cannot download directly from Sunsolve anymore due to Sunsolve usr/pwd restriction. So, I used SolarisDownloadCacher. But I have couple questions about this application though.

  1. I started download patches for Solaris10 but they all got same ERROR:Mismatched checksum. How could I fix this problem?

Fri Dec 21 10:43:40 2007

Parsing fixlet #121002 for download links…

Fri Dec 21 10:43:40 2007

Starting file download for bulletin 121002 (fixlet #121002)

Fri Dec 21 10:43:40 2007

Starting download for file 121002-03.jar

Fri Dec 21 10:43:42 2007

ERROR: Mismatched checksums for file 121002-03.jar. Solaris 121002 has been updated since the current Fixlet site was published

Fri Dec 21 10:43:42 2007

Parsing fixlet #121004 for download links…

Fri Dec 21 10:43:42 2007

Starting file download for bulletin 121004 (fixlet #121004)

Fri Dec 21 10:43:42 2007

Starting download for file 121004-03.jar

Fri Dec 21 10:43:44 2007

ERROR: Mismatched checksums for file 121004-03.jar. Solaris 121004 has been updated since the current Fixlet site was published

  1. If all patches are downloaded completely to cache, Do I need to change fixlet’s action to point to cache instead of Sunsolve?

Thank you in advance

PeterC

(imported comment written by anne_young)

Hi PeterC,

The error you listed occurs when the actual size and sha1 of a Solaris patch download does not match the size and sha1 in the Fixlet message for that same patch. What arguments are you using to run the download cacher (aside from your Sun login information, of course)? I am not able to reproduce this error right now when I try to download all patches for Solaris 8, 9, and 10.

You might just try running it again. Sun’s website is up and down and sometimes connectivity problems with different portions of the site can cause the download cacher to misbehave.

To answer your 2nd question: No, you should not have to change the Fixlet action at all when you use the download cacher to download Solaris patches to the BES Server download cache. If you are using the cacher tool with a download location other than “cache”, you would need to eventually move those files to the BES Server cache before you take action using BES, but you should not need to modify the Fixlet action in either case.

I hope that is at least a little bit helpful.

Thanks,

Anne

Product Engineer

BigFix

(imported comment written by SystemAdmin)

Hi anne

I re-ran SolarisDownloadcacher again, but it still got same error.

Here is an argument I put;

SolarisDownloadCacher.exe (user) (Password) cache D:\logs yes PROXY http://x.x.x.x:80

And these are errors I found (again)

Thu Jan 3 07:11:52 2008

Using no-authentication proxy

Thu Jan 3 07:11:52 2008

Applicable OS: All Versions

Thu Jan 3 07:13:54 2008

contacted site http://sunsolve.sun.com/LOGIN

Thu Jan 3 07:15:56 2008

Starting parse of gather URL http://sync.bigfix.com/cgi-bin/bfgather/solarispatches

Thu Jan 3 07:16:03 2008

Starting parse of digest http://sync.bigfix.com/bfsites/solarispatches_603/100.fxf

Thu Jan 3 07:16:03 2008

Parsing fixlet #118560 for download links…

Thu Jan 3 07:16:03 2008

Starting file download for bulletin 118560 (fixlet #118560)

Thu Jan 3 07:16:03 2008

Starting download for file 118560-02.jar

Thu Jan 3 07:16:04 2008

ERROR: Mismatched checksums for file 118560-02.jar. Solaris 118560 has been updated since the current Fixlet site was published

Thu Jan 3 07:16:04 2008

Parsing fixlet #118712 for download links…

Thu Jan 3 07:16:04 2008

Starting file download for bulletin 118712 (fixlet #118712)

Thu Jan 3 07:16:04 2008

Starting download for file 118712-19.jar

Thu Jan 3 07:16:05 2008

ERROR: Mismatched checksums for file 118712-19.jar. Solaris 118712 has been updated since the current Fixlet site was published

Is it related to ‘proxy’ or any network things for this mismatch problem?

(imported comment written by rad.ricka91)

Hello Anne, all,

exactly same error here. It happens for all patches, all Solaris versions, unable to download anything at the moment.

Command line:

E:\BES_NEW\Solaris>SolarisDownloadCacher.exe username password E:\BE

S_NEW\Solaris\Cache E:\BES_NEW\Solaris\ 8 9 10 10x86 PROXY http://10.1.51.10:80

(imported comment written by SystemAdmin)

Hi all

I finally got most Solaris patches working now. However, there are some patches still having “ERROR: Mismatched checksums” such as

118959-03 /usr/bin/lastcomm

119764-06 ipmitool

120719-02 GZIP

Does anyone around here got any problem on these patches ?

Also, If sha1 of these patches are different from fixlet, Could I just download these patches from solaris manually and rename them to fixlet’s sha1 number and place them in Cache?

(imported comment written by jessewk)

Hi Peter,

You can manually download and cache the files, but just renaming them to the sha1 in the Fixlet won’t work. They actually have to have the the same sha1. You can try downloading them manually and check if the sha1 does match using the relevance debugger: sha1 of file “c:\foo.rpm”

If it matches up, than put them in the cache manually and you should be good to go.

Jesse

(imported comment written by MartinZ91)

Hi Everyone

We do have this same error (“Mismatch”) now also in our deployment (7.0). I understand that there has been a new version of the solaris_downloadCacher.exe on 1.Feb and we use this version. As far as my logfiles for the download-cacher reach back, the problem exists quite a long time (cannot say if since the new version), it was hidden behind my available time.

Currently it looks to me as if the Solaris-Patches used to generate the fixlets and those downloaded with the download_cacher are different. On the sunsolve-site I did find after login, that there are two versions one “unsigned” and one “signed” which differ in size by a few bytes and also differ in file-type.

I did the tests several times and checked for correct site-gather of “Patches for Solaris” in between. I also downloaded one of the patches (112874-44) manually through the sunsolve website, signed and unsigned. Those files do have really different sha1 checksums then the sha1 given in the corresponding fixlet.

Does anyone experience the same problem? And even better: Is there a solution for this?

Thanks, Martin

(imported comment written by SystemAdmin)

Did anyone ever get this fixed? I am running into the same issues.

(imported comment written by BenKus)

Hi Nicky,

Response from our engineer responsible for this tool:

“I run the Solaris download cacher twice a day on every patch from every Solaris fixlet that we support. If there are any mismatches, we update our fixlets and publish. I’m running the download cacher right now and I have not seen any mismatch errors. Can you find out what specific patches are causing the mismatch error, I can look into it.”

Alternately, open a support case and we can work with you through phone/email.

Ben

(imported comment written by SystemAdmin)

Thank you Ben. I have traced this back to a problem with our account. Does Bigfix have any plans to updated the Solaris downloader in the same way they did with RedHat? Having that email notification and summary is great.