Uploaded image for project: 'Artifactory Binary Repository'
  1. Artifactory Binary Repository
  2. RTFACT-27037

Go Package Installation Fails with Checksum Mismatch

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Done
    • Resolution: Done
    • Affects Version/s: 7.35.0
    • Fix Version/s: None
    • Component/s: Artifactory
    • Labels:
      None
    • Severity:
      High
    • Location:
      External

      Description

      Problem description: Go Package Installation Fails with checksum mismatch oapi-codegen

      What is the impact to the customer? The customer is trying to use Artifactory as a Go proxy and is unable to do so based on this issue. 

      What is the expected behavior? The expected behavior is that the following command completes without issue when the GOPROXY points to Artifactory (this succeeds when using the default value for GOPROXY):

      $ go install -x github.com/deepmap/oapi-codegen/cmd/oapi-codegen@v1.9.1

      Steps to reproduce: 

      1. Set up a go remote repository which mirrors https://proxy.golang.org/ and place this within a virtual repo
      2. Configure the GOPROXY environment variable to point to this virtual repository: 
      GOPROXY="http://ART-URL/artifactory/api/go/go/"

             3. Try to install the deepmap/oapi-codegen/cmd/oapi-codegen@v1.9.1 Go package via the following command:

      $ go install -x github.com/deepmap/oapi-codegen/cmd/oapi-codegen@v1.9.1

      Expected Behavior: the package is resolved from Artifactory without issue

      Actual Behavior: the go client shows the following error when trying to resolve the package: 

      #6 1.708 # get http://ART-URL/artifactory/api/go/go/github.com/deepmap/oapi-codegen/@v/v1.9.1.mod
      #6 1.801 # get http://ART-URL/artifactory/api/go/go/github.com/deepmap/oapi-codegen/@v/v1.9.1.mod: 200 OK (0.092s)
      #6 1.802 go install: github.com/deepmap/oapi-codegen/cmd/oapi-codegen@v1.9.1: github.com/deepmap/oapi-codegen@v1.9.1: verifying go.mod: checksum mismatch
      #6 1.802        downloaded: h1:nGHB/68U1xA7OIRxYpJqEpP8GWBEQG+vYIv0DwX1jwU=
      #6 1.802        sum.golang.org: h1:PLqNAhdedP8ttRpBBkzLKU3bp+Fpy+tTgeAMlztR2cw=

      Environment details: Artifactory 7.35.2, go client 1.18

      System Details: On prem, single node installation

      Stacktrace: A bunch of the following types of errors:

      2022-04-25T09:30:27.662Z [jfrt ] [INFO ] [463aa678268a4476] [r.r.f.g.GoRemoteGitFetcher:246] [http-nio-8081-exec-5] - Couldn't retrieve a commit hash for module https://go.googlesource.com/xerrors with status 403, rate limit exceeded
      2022-04-25T09:30:27.663Z [jfrt ] [ERROR] [463aa678268a4476] [r.r.f.g.GoRemoteGitFetcher:109] [http-nio-8081-exec-5] - something went wrong with fetching release-branch.go1.15 information. This branch will not be added to List of versions returned to the client

      As well as: 

      2022-04-25T09:30:27.664Z [jfrt ] [ERROR] [463aa678268a4476] [c.e.m.GlobalExceptionMapper:48] [http-nio-8081-exec-5] - nulljava.lang.NullPointerException: nullat org.artifactory.addon.go.repo.remote.fetcher.git.GoRemoteGitFetcher.pullLatestVersion(GoRemoteGitFetcher.java:299)at org.artifactory.addon.go.repo.remote.GoRemoteRepoHandler.latestProjectVersion(GoRemoteRepoHandler.java:245)at org.artifactory.addon.go.repo.merge.GoLatestVersionMerger.getLatestResponsePerType(GoLatestVersionMerger.java:91)at org.artifactory.addon.go.repo.merge.GoLatestVersionMerger.merge(GoLatestVersionMerger.java:102)at org.artifactory.addon.go.repo.merge.GoMetadataMerger.getResults(GoMetadataMerger.java:87)at org.artifactory.addon.go.repo.merge.GoMetadataMerger.getMergedResults(GoMetadataMerger.java:73)at org.artifactory.addon.go.repo.merge.GoLatestVersionMerger.getLatestVersionFromMerged(GoLatestVersionMerger.java:60)at org.artifactory.addon.go.repo.virtual.GoVirtualRepoHandler.latestProjectVersion(GoVirtualRepoHandler.java:149)at org.jfrog.repomd.go.rest.GoSubResource.latestVersion(GoSubResource.java:144)
      

       

        Attachments

          Activity

              People

              Assignee:
              Unassigned
              Reporter:
              samr@jfrog.com Samuel A Rosenstein
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:

                  Sync Status

                  Connection: RTFACT Sync
                  RTMID-27093 -
                  SYNCHRONIZED
                  • Last Sync Date: