[GoboLinux 014-release candidate 0000205]: InstallPackage offering more help in case something fails (i.e. Signature Check)

[bugs at gobolinux.org]

A NOTE has been added to this issue. 
====================================================================== 
http://bugs.gobolinux.org/view.php?id=205 
====================================================================== 
Reported By:                shevegen
Assigned To:                
====================================================================== 
Project:                    GoboLinux 014-release candidate
Issue ID:                   205
Category:                   
Reproducibility:            always
Severity:                   minor
Priority:                   normal
Status:                     new
====================================================================== 
Date Submitted:             2007-11-22 06:01-0800
Last Modified:              2007-11-27 06:39-0800
====================================================================== 
Summary:                    InstallPackage offering more help in case something
fails (i.e. Signature Check)
Description: 
What I would like to describe is at best "summarized" by just pasting some
lines of IRC. Its a bit funny too because he left VERY soon after he asked
so there was not really a chance to answer it ... but I think he has a
point along those lines, insofar that the scripts' interaction could be
improved ;-)


<insulina> my gobo is not function well, it told me to update Compile so i
did that , but now when i try this 
<insulina> compile lyx 
<insulina> it tells me this 
<insulina> Compile: Your Scripts package is too old. Please update it by
running 'InstallPackage Scripts'.
<insulina> when i do "InstallPackage Scripts"
<insulina> it tells me this 
<insulina> InstallPackage: Invalid signature.  Package has been modified
<insulina> InstallPackage: Suspect package in /Programs/Scripts/2.8.1
<insulina> InstallPackage: Removing downloaded package
/System/Variable/tmp/Scripts--2.8.1--i686.tar.bz2.
<insulina> so what should i do ???
<insulina> got to go ... 
<insulina> bye

I think this is not only a small bug, but also slightly problematic from a
user's perspective. A user will first ask himself - what is an invalid
signature? Is this problematic in the first case?

And, what is more important, why does Compile encourage to use
InstallPackage, which then just fails?

I think in either case the scripts should hint a bit more how to solve a
problem.
In this case, I think InstallPackage should provide more information, I
dont think its good to just tell a user that the package is "invalid" in
signature, and then removing the suspected party - resolving this problem
will almost always mean asking on mailing list or IRC too right now :-)
(or maybe have the info on the wiki... the only page about signing i found
was on http://gobo.kundor.org/wiki/PackageSigning )
====================================================================== 

---------------------------------------------------------------------- 
 hisham - 2007-11-22 09:49  
---------------------------------------------------------------------- 
Thanks for the report. The issue here is that the package signature format
changed. I resigned the Scripts package, which suffers from this
bootstrapping issue, with the old format to avoid the problem. This time,
we made the code future proof by providing the message "Unsupported
FileHash format, please upgrade Scripts" in case of future upgrades to the
format. 

---------------------------------------------------------------------- 
 hisham - 2007-11-27 06:39  
---------------------------------------------------------------------- 
Jonas also added a fix to InstallPackage which further improves the
handling of signature format changes. With this and the re-signing of
Scripts, I think this bug could be considered fixed, but I'd like to hear
more opinions about this. 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
2007-11-22 06:01shevegen       New Issue                                    
2007-11-22 09:49hisham         Note Added: 0000483                          
2007-11-27 06:39hisham         Note Added: 0000500                          
======================================================================