Arch Linux User Repository

Can't upgrade because of failed md5sums validity check error. yay -a

:: Searching AUR for updates...
:: 1 package to upgrade/install.
1  aur/curl-impersonate-chrome  1:0.9.3-1 -> 1:0.9.5-1
==> Packages to exclude: (eg: "1 2 3", "1-3", "^4" or repo name)
 -> Excluding packages may cause partial upgrades and break systems
==>
AUR Dependency (1): curl-impersonate-chrome-1:0.9.5-1
:: PKGBUILD up to date, skipping download: curl-impersonate-chrome
  1 curl-impersonate-chrome          (Installed) (Build Files Exist)
==> Packages to cleanBuild?
==> [N]one [A]ll [Ab]ort [I]nstalled [No]tInstalled or (1 2 3, 1-3, ^4)
==>
  1 curl-impersonate-chrome          (Installed) (Build Files Exist)
==> Diffs to show?
==> [N]one [A]ll [Ab]ort [I]nstalled [No]tInstalled or (1 2 3, 1-3, ^4)
==>
==> Making package: curl-impersonate-chrome 1:0.9.5-1 (Sun 30 Mar 2025 09:50:05 PM CDT)
==> Retrieving sources...
  -> Found curl-impersonate.tar.gz
==> WARNING: Skipping verification of source file PGP signatures.
==> Validating source files with md5sums...
    curl-impersonate.tar.gz ... FAILED
==> ERROR: One or more files did not pass the validity check!
 -> error downloading sources: /home/xxxxxx/.cache/yay/curl-impersonate-chrome
     context: exit status 1


:: (1/1) Parsing SRCINFO: curl-impersonate-chrome
==> Making package: curl-impersonate-chrome 1:0.9.5-1 (Sun 30 Mar 2025 09:50:07 PM CDT)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving sources...
  -> Found curl-impersonate.tar.gz
==> Validating source files with md5sums...
    curl-impersonate.tar.gz ... FAILED
==> ERROR: One or more files did not pass the validity check!
 -> error making: curl-impersonate-chrome-exit status 1
 -> Failed to install the following packages. Manual intervention is required:
curl-impersonate-chrome - exit status 1

Edit: Solved. I just had to move curl-impersonate.tar.gz that was in ~/.cache/yay/curl-impersonate-chrome/ to a different directory and then deleted it after the update was successful. I'll just leave this here in case it helps someone else.

This package downloads stuff in build().

@dreieck that is how the upstream Makefile works: https://github.com/lexiforest/curl-impersonate/blob/main/Makefile.in

I don't think there is any feasible workaround for it.

This package downloads stuff in build().
This should not happen; after the run of prepare() all stuff needed to build should be there and prepared, so that build() and package() can run in an offline environment.

Please try to move the downloads to the source array or into the prepare() function.

Regards and thanks for the package!

==> Starting build()...
[...]
curl -L "https://github.com/google/brotli/archive/refs/tags/v1.1.0.tar.gz" \
    -o "brotli-1.1.0.tar.gz"
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100  499k  100  499k    0     0   185k      0  0:00:02  0:00:02 --:--:--  684k
[...]
make[1]: Leaving directory '/var/cache/makepkg/build/curl-impersonate-chrome/src/curl-impersonate-0.9.5/build/brotli-1.1.0/out'
curl -L https://github.com/google/boringssl/archive/23768dca563c4e62d48bb3675e49e34955dced12.zip \
    -o boringssl-23768dca563c4e62d48bb3675e49e34955dced12.zip
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100 47.3M    0 47.3M    0     0  6150k      0 --:--:--  0:00:07 --:--:-- 7946k
[...]
make[1]: Leaving directory '/var/cache/makepkg/build/curl-impersonate-chrome/src/curl-impersonate-0.9.5/build/nghttp2-1.63.0'
curl -L "https://github.com/curl/curl/archive/curl-8_7_1.tar.gz" \
    -o "curl-8_7_1.tar.gz"
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100 3246k    0 3246k    0     0  1754k      0 --:--:--  0:00:01 --:--:-- 4249k
[...]

@patlefort and @mattf, why was there a need to increase the epoch?

I think you should have just increased the pkgrel to 2.

pacman is able to compare v0.9.3-1 to 0.9.3-2 and understand that 0.9.3-2 is newer. Take a read at man PKGBUILD.

checking for SSL_connect in -lssl... no
checking for ssl with RSAglue/rsaref libs in use... checking for SSL_connect in -lssl... (cached) no
no
configure: error: OpenSSL libs and/or directories were not found where specified!
make: *** [Makefile:245: curl-8_7_1/.chrome] Error 1

@patlefort Thanks! Applied.

Patch to fix some issues: https://pastebin.com/iBdeqW9R

• Force -j1: Makefile has a lot of issues when building in parallel.
• Remove v from version.
• Fix a warning as error.
• provides variable should not contain the package's name, they already provide themselves.
• !buildflags no longer necessary.

Installing the libc++ package solved the

/usr/bin/ld: cannot find -lc++: No such file or directory

for me. I guess this should be added to depends array in the PKGBUILD:

depends=(nss libc++)

@patlefort I encountered the same error when I tried building this package, not sure if I have any wrong configs in my machine.

@dilud Thanks. I also have the same issue as you in the end. I feel that patching the patch feels like a hack, but if we find a way to fix the other issue then we could do it like that.