[Bug 295726] do-fetch skipping fetch based on filename without further validation

From: <bugzilla-noreply_at_freebsd.org>
Date: Tue, 16 Jun 2026 05:19:35 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295726

Mathieu Arnold <mat@FreeBSD.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|Open                        |Closed
         Resolution|---                         |Works As Intended

--- Comment #16 from Mathieu Arnold <mat@FreeBSD.org> ---
(In reply to Chris Davidson from comment #13)

Ok, yes, what your log shows is my second example, the remote distfile and the
local checksum disagree, it works as intended, the remote file changed, and the
framework tells you "sorry, the remote file changed, I'm not using it for
reasons of security"

(In reply to Benjamin Takacs from comment #14)
Well, it is how it has worked for the past like 30 years, make fetch will fetch
the files that are not in the local DISTDIR, and make checksum will verify
those files, and try to re-fetch the ones that are "wrong".

(In reply to Chris Davidson from comment #15)
Yes, the issue was that the remote file had changed, and the framework stopped
you from using a non verified file.
If you absolutely want to use any file, disabling checksums, you can add
NO_CHECKSUM=yes to your make.conf, but I would strongly suggest that you do
not, there are checksums for a reason ;-)

-- 
You are receiving this mail because:
You are on the CC list for the bug.