btcd: Suspicious go.sum checksum mismatch

Got this today randomly, after not having touched the go.mod entry for the package:

verifying github.com/btcsuite/btcd@v0.20.0-beta: checksum mismatch
        downloaded: h1:DnZGUjFbRkpytojHWwy6nfUSA7vFrzWXDLpFNzt74ZA=
        go.sum:     h1:PamBMopnHxO2nEIsU89ibVVnqnXR2yFTgGNc+PdG68o=

Doing go clean -modcache and then go mod download did not fix it. Doing GOPROXY=direct go mod download did fix it, however.

Which leads me to ask… is proxy.golang.org ok?

About this issue

Original URL
State: closed
Created 5 years ago
Reactions: 3
Comments: 15 (6 by maintainers)

Most upvoted comments

This retagging had broken my project build, where I have btcd as transitive dependency from my direct dependency go-ethereum . I’ve fixed it by updating btcd version manually, it feels dirty but it works. And I really hope what you guys never ever will do such retagging-thing again. Please!

nordicdyno on Nov 13, 2019

@mediocregopher new tag pushed.

Roasbeef on Nov 13, 2019