magento2: klarna-module-ordermanagement-4.1.3.0 checksum verification failed

Preconditions

  1. PHP 7.0
  2. NGINX
  3. Composer 1.6.5

Steps to reproduce

  1. composer create-project --repository-url=https://repo.magento.com/ magento/project-community-edition magento2

Expected result

  1. Successfull fresh Magento 2.2.4 install

Actual result

  1. Exception while downloading dependency module:
Installing klarna/module-ordermanagement (4.1.3): Downloading (100%)         
                                                                                                                                                                            
  [UnexpectedValueException]                                                                                                                                                
  The checksum verification of the file failed (downloaded from https://repo.magento.com/archives/klarna/module-ordermanagement/klarna-module-ordermanagement-4.1.3.0.zip) 

About this issue

  • Original URL
  • State: closed
  • Created 6 years ago
  • Reactions: 44
  • Comments: 38 (16 by maintainers)

Most upvoted comments

@yyevgenii: if a package is re-uploaded and the hash changes it should always get a new version. The way this was handled right now is just bad management. Hope this won’t happen anymore in the future…

Temporary if you don’t need that module you can remove (replace) it by adding this to your composer.json I was updating the installation.

    "replace": {
        "klarna\/module-ordermanagement": "*"
    },

credits

The klarna/module-ordermanagement package was re-uploaded to the Marketplace (the package contents is the same, but file meta data differs, that’s why the checksum has been changed). Magento has identified an issue and prevent it from happening this in the future, but now to solve it you have to run:

  • composer clearcache
  • rm -rf vendor/klarna/module-ordermanagement
  • composer update

You can’t update just a single package because it isn’t in the require section, that’s why you have to run composer update. The version of the package remains the same, so composer won’t download it again, if the package is already installed, that’s why you have to remove the package from the vendor folder. Clear the composer cache just in case.

The issue occured today in my Magento Commerce 2.2.5 installation.

@hostep the team responsible for this has found the process in a workflow which may cause issue like this one. they said that it’ll be reworked and the issue shouldn’t happen again.

Just a little clarification about @cmuench commands:

composer clearcache
rm -rf vendor/klarna/module-ordermanagement
composer update

If you run composer update you will update all packages, and sometimes maybe you don’t want to. Just update the package with that has checksum error

composer clearcache
rm -rf vendor/klarna/module-ordermanagement
# update only the "broken package"
composer update klarna/module-ordermanagement

So the `composer.lock’ will be update with shasum correctly and you can download the package

@quisse we always commit the composer.lock. It is only a hint for other ppl here.

@yyevgenii yes, but we need this information in the release notes of Magento 2.2.5. This is an problem for all developer who update from 2.2.4.

composer.lock should always be commited.

I had the same issue, and after a composer update I got it working fine.

i had same issue, but now it seems to work again.