[Bug 1880222] Re: ubuntu bionic-backports Hash Sum mismatch

[Richard H.]

Yes, I am.

When I download the file myself via firefox, I get a file that matches
the hash it is supposed to be and this also matches the file in
/var/lib/apt/lists of which the file in /var/lib/apt/lists/partial is
merely a symlink.

I ran an ISP transparent proxy test and it came up negative.
And the ISP is not involved in DNS at all, because Firefox uses Cloudflare DoH and I'm using Cloudflare DoT otherwise for the system currently.

For DNS lookup, I get:
; unsigned answer
us.archive.ubuntu.com.	3200171710 IN	A	91.189.91.38
us.archive.ubuntu.com.	3200171710 IN	A	91.189.91.39

And Firefox is using the latter.

(If Ubuntu served these files over https, there would be no possibility
of interference by a proxy.)

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to apt in Ubuntu.
https://bugs.launchpad.net/bugs/1880222

Title:
  ubuntu bionic-backports Hash Sum mismatch

Status in apt package in Ubuntu:
  Incomplete
Status in update-manager package in Ubuntu:
  Incomplete

Bug description:
  # apt-get update
  (proceeded normally until...)
  Err:24 http://us.archive.ubuntu.com/ubuntu bionic-backports i386 Contents (deb)
    Hash Sum mismatch
    Hashes of expected file:
     - Filesize:724924 [weak]
     - SHA256:d59f30b35a9fd0f52922cbf3a4bf1f0713e816a209cca57bac1dbc56af3c9a77
     - SHA1:0d1e53232da2c41febc6cccecfc4000f930c3450 [weak]
     - MD5Sum:dfa1f7010a23b70c967aef7600ebd49f [weak]
    Hashes of received file:
     - SHA256:1c97d900fc3b9168c38bf870b1dd7c71be88ff72e0751c1551b8129c8de98740
     - SHA1:a725025e50c3ebd60dd16058594340b4ca9c97e2 [weak]
     - MD5Sum:925bb2a78f81a2dc9b4269a6f5e9ece5 [weak]
     - Filesize:90948 [weak]
    Release file created at: Fri, 22 May 2020 16:49:51 +0000
  Fetched 254 MB in 51s (5,014 kB/s)
  Reading package lists... Done
  E: Failed to fetch store:/var/lib/apt/lists/partial/us.archive.ubuntu.com_ubuntu_dists_bionic-backports_Contents-i386.gz  Hash Sum mismatch
     Hashes of expected file:
      - Filesize:724924 [weak]
      - SHA256:d59f30b35a9fd0f52922cbf3a4bf1f0713e816a209cca57bac1dbc56af3c9a77
      - SHA1:0d1e53232da2c41febc6cccecfc4000f930c3450 [weak]
      - MD5Sum:dfa1f7010a23b70c967aef7600ebd49f [weak]
     Hashes of received file:
      - SHA256:1c97d900fc3b9168c38bf870b1dd7c71be88ff72e0751c1551b8129c8de98740
      - SHA1:a725025e50c3ebd60dd16058594340b4ca9c97e2 [weak]
      - MD5Sum:925bb2a78f81a2dc9b4269a6f5e9ece5 [weak]
      - Filesize:90948 [weak]
     Release file created at: Fri, 22 May 2020 16:49:51 +0000
  E: Some index files failed to download. They have been ignored, or old ones used instead.

  $ apt-get -v
  apt 1.6.12ubuntu0.1 (amd64)

  Also, Software Updater (version 1:18.04.11.12) after hitting "Install" gives pop-up:
  "Requires installation of untrusted packages
   This requires installing packages from unauthenticated sources."
  Only options: "Settings..." and "OK"
  And it is not OK; I have not configured any unauthenticated sources!

  This occurs when enabling updates from Ubuntu Base (but not Security
  updates).

  I expected to not get such errors and updating to occur normally.

  $ lsb_release -rd
  Description:	Ubuntu 18.04.4 LTS
  Release:	18.04

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1880222/+subscriptions