无法从 sources.list 安装 Webmin,16.04 LTS 中的哈希值不匹配

无法从 sources.list 安装 Webmin,16.04 LTS 中的哈希值不匹配

安装 Webmin

echo "deb http://download.webmin.com/download/repository sarge contrib" > /etc/apt/sources.list.d/webmin.list
cd /root
wget http://www.webmin.com/jcameron-key.asc
apt-key add jcameron-key.asc
rm jcameron-key.asc
apt-get update && apt-get install webmin -y
root@Ubuntu:~# apt-get install webmin -y
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following additional packages will be installed:
  apt-show-versions libapt-pkg-perl libauthen-pam-perl libio-pty-perl libnet-ssleay-perl
The following NEW packages will be installed:
  apt-show-versions libapt-pkg-perl libauthen-pam-perl libio-pty-perl libnet-ssleay-perl
  webmin
0 upgraded, 6 newly installed, 0 to remove and 0 not upgraded.
Need to get 28.2 MB/28.6 MB of archives.
After this operation, 159 MB of additional disk space will be used.
Get:1 http://download.webmin.com/download/repository sarge/contrib amd64 webmin all 1.791 [28.2 MB]
Err:1 http://download.webmin.com/download/repository sarge/contrib i386 webmin all 1.791    
  Hash Sum mismatch
Get:1 http://download.webmin.com/download/repository sarge/contrib i386 webmin all 1.791 [28.2 MB]
Err:1 http://download.webmin.com/download/repository sarge/contrib all webmin all 1.791     
  Hash Sum mismatch
Err:1 http://download.webmin.com/download/repository sarge/contrib all webmin all 1.791     
  Hash Sum mismatch
Fetched 49.9 MB in 21s (2,325 kB/s)                                                         
E: Failed to fetch http://download.webmin.com/download/repository/pool/contrib/w/webmin/webmin_1.791_all.deb  Hash Sum mismatch

E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?
root@Ubuntu:~# 

答案1

这可能与 16.04 中取消 SHA1 校验有关

明天... APT 将发布新版本,关闭 Debian 不稳定版本和即将发布的 Ubuntu Xenial 中对 SHA-1 校验的支持。虽然我不知道是否会有针对我们使用 SHA1 的攻击,但 Xenial(Ubuntu 16.04 LTS)将获得 5 年的支持,而且未来 5 年的情况可能会发生很大变化。由于禁用 SHA1 支持需要在我们的测试套件中进行一些修补,因此最好现在就这样做,而不是等到我们被迫这样做的时候再做。

https://juliank.wordpress.com/2016/03/14/dropping-sha-1-support-in-apt/

相关内容