diff options
author | The Bundler Bot <bot@bundler.io> | 2016-11-19 03:52:58 +0000 |
---|---|---|
committer | The Bundler Bot <bot@bundler.io> | 2016-11-19 03:52:58 +0000 |
commit | d46522577ff6b09909d6113db3cd9ff059a45445 (patch) | |
tree | 49b63f7cd7d6c8817f9fb321a991f1508ce8b4cd /.rubocop.yml | |
parent | da2dc28fc3070475a4f258cabfa4a054d0e88a37 (diff) | |
parent | da6dcf4c2f89cfc6b15f1078104c2929fb2ef954 (diff) | |
download | bundler-d46522577ff6b09909d6113db3cd9ff059a45445.tar.gz |
Auto merge of #5119 - hmistry:explain-checksum-mismatch, r=segiddins
Improve gem checksum mismatch error message
Improve gem checksum mismatch error message by telling users how to resolve it.
Old message:
```
The checksum for the downloaded `rack-1.0.0.gem` did not match the checksum given by the API. This means that the contents of the gem appear to be different from what was uploaded, and could be an indicator of a security issue.
(The expected SHA256 checksum was "abababababababababababababababababababababab", but the checksum for the downloaded gem was "BR6Oc6Gqnq93u1aIVX4m6DvTHaFgFxdYaLUfa4ekJKI=".)
Bundler cannot continue installing rack (1.0.0).
```
New message:
```
Bundler cannot continue installing rack (1.0.0).
The checksum for the downloaded `rack-1.0.0.gem` does not match the checksum given by the server. This means the contents of the downloaded gem is different from what was uploaded to the server, and could be a potential security issue.
To resolve this issue:
1. delete the downloaded gem located at: `full-path/gems/rack-1.0.0/rack-1.0.0.gem`
2. run `bundle install`
If you wish to continue installing the downloaded gem, and are certain it does not pose a security issue despite the mismatching checksum, do the following:
1. run `bundle config disable.checksum_validaiton true` to turn off checksum verification
2. run `bundle install`
(More info: The expected SHA256 checksum was "abababababababababababababababababababababab", but the checksum for the downloaded gem was "PbfaoemSetv76QdcxuoP0ggZ0TZhMELlMMWURJoX+dw=".)
```
Closes #5075
Diffstat (limited to '.rubocop.yml')
0 files changed, 0 insertions, 0 deletions