misc/136225: Portaudit reports database too old when updating

[Jim]

>Number:         136225
>Category:       misc
>Synopsis:       Portaudit reports database too old when updating
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed Jul 01 17:10:00 UTC 2009
>Closed-Date:
>Last-Modified:
>Originator:     Jim
>Release:        7.1
>Organization:
Graff Chevrolet
>Environment:
FreeBSD **********.com 7.1-RELEASE FreeBSD 7.1-RELEASE #0: Thu Jan  1 14:37:25 UTC 2009     root at logan.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC  i386       
>Description:
For several days now, I've received the following error when running 'portaudit -F' to update the vulnerability database:

auditfile.tbz                                 100% of   53 kB   10 kBps
portaudit: Database too old.
Old database restored.
portaudit: Download failed.


After some searching online, I found this post: http://www.pubbs.net/freebsd/200906/49732/ in which it's suggested that the problem lie with the URL that portaudit uses to update it's database.  Basically, change line 42 from 

: ${portaudit_sites="http://portaudit.FreeBSD.org/"}

to

: ${portaudit_sites="http://www.FreeBSD.org/ports/"}


Looking at the output of portaudit -d before this change indicated that the database was created on June 23.  After making this change and running portaudit -F again (which did not produce the error, portaudit -d showed the database time stamp as being today, July 1.  The new update site, portaudit.freebsd.org, is up and serving hypertext, so I'd guess it's an updating issue.




Additionally, I would like to suggest that the site to update from be turned into an array, and if one update location is unavailable or hasn't been updated for n days, portaudit cycle through the remaining URLs.  Strictly speaking, this is beyond the scope of this bug report, but would provide more redundancy and stability to the functionality of this port.
>How-To-Repeat:
Run portaudit -F on version 0.5.3 of the port with the default update site in place.
>Fix:
Change line 42 from 

: ${portaudit_sites="http://portaudit.FreeBSD.org/"}

to

: ${portaudit_sites="http://www.FreeBSD.org/ports/"}


>Release-Note:
>Audit-Trail:
>Unformatted: