[RTFACT-15478] Debian repos produce Hash sum mismatch with versions 5.6.x Created: 14/Dec/17  Updated: 30/Apr/18  Resolved: 19/Dec/17

Status: Resolved
Project: Artifactory Binary Repository
Component/s: Debian
Affects Version/s: 5.6.2
Fix Version/s: 5.7.0, 5.6.3

Type: Bug Priority: Blocker
Reporter: Mohammad Tibi Assignee: Dan Feldman (Inactive)
Resolution: Fixed Votes: 0
Labels: None

Sprint: Leap 27

 Description   

Debian packages sha256 properties gets set to null, once indexing when upgrading from Artifactory 5.X < 5.6 to Artifactory 5.6 or above.

After getting into this state, if you will try apt-get update, you will always get the the below error:

Failed to fetch http://localhost:8081/artifactory/debian-local/dists/trusty/main/binary-amd64/Packages Hash Sum mismatch

Steps to reproduce:
1. Install Artifactory version below 5.6
2. Create Debian repo and upload a Debian package
3. You could see that you have the sha256 properties
4. Upgrade to Artifactory 5.6 or above
5. Right click on the debian repo and click Recalculate index
6. you will see that the sha256 properties are set to null
7. try apt-get update, you will get the Hash Sum mismatch error

Workarounds:

1. First workaround:
Turn on the sha2 migration which will calculate the sha2 checksums. You may enable it, by adding the below system property to your $ARTIFACTORY_HOME/etc/artifactory.system.properties file:
artifactory.sha2.migration.job.enabled=true
Please note that you will have to wait until the migration is complete.
More information about the migration could be found below:
https://www.jfrog.com/confluence/display/RTF/Checksum-Based+Storage#Checksum-BasedStorage-MigratingtheDatabasetoIncludeSHA-256

2. Second workaround:
a) Delete all your dists folders from your debian repositories
b) Empty the trash can
c) Run the garbage collector job
d) Wait until the garbage collector job is done
e) Right click on the debian repo and click Recalculate index

3. Third workaround:
Add/delete any ".deb" package to your debian repository ( make sure that after the deletion you have at least two debian packages)


Generated at Tue Feb 18 08:12:32 UTC 2020 using JIRA 7.6.16#76018-sha1:9ed376192612a49536ac834c64177a0fed6290f5.