Subject: bug#163: File size mismatch using apt-transport-https

From: Chillfan <[email-masked]>
Date: Thu, 23 Nov 2017 14:35:46 -0500

Package: apt-transport-https
Version: 1.0.9.8.4

Installing a package over https using apt-transport https causes apt to report that the file size does not match what the server reported. Others have mentioned having this issue on the freenode channels.

Here is some of the output:

W: Size of file /var/cache/apt/archives/partial/wget_1.16-1+deb8u4_i386.deb is not what the server reported 503980 923
W: Size of file /var/cache/apt/archives/partial/iceweasel_52.5.0esr-1~deb8u1_all.deb is not what the server reported 121762 4889
W: Size of file /var/cache/apt/archives/partial/xserver-common_2%3a1.16.4-1+deb8u2_all.deb is not what the server reported 1758568 1719696
W: Size of file /var/cache/apt/archives/partial/xserver-xorg-core_2%3a1.16.4-1+deb8u2_i386.deb is not what the server reported 3129878 3122808

After a little testing I found I could only reproduce this on Jessie. It can be reproduced by installing a package from the mirror using apt-transport-https.
This looks to be the same as a Debian bug that was closed, but does not look to be fixed in Jessie: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=802617)

Sent with [ProtonMail](https://protonmail.com) Secure Email.

---

From: [email-masked] (Devuan bug Tracking System)

This is an automatic notification regarding your bug report
#163: File size mismatch using apt-transport-https,
which was filed against the apt-transport-https package.

It has been closed by one of the developers, namely
KatolaZ <[email-masked]>.

Their explanation is attached below.  If this explanation is
unsatisfactory and you have not received a better one in a separate
message then please contact the developer, by replying to this email.

Devuan Bugs Owner
(administrator, Devuan bugs database)

Date: Fri, 15 Dec 2017 13:30:16 +0000
From: KatolaZ <[email-masked]>
To: [email-masked]
Subject: solved in ascii

--Ixr8jHECx5XfEy2B
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

This is only present in Devuan Jessie, and solved in Devuan
ASCII. Please see the corresponding Debian bug:

  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=802617

which apparently remains open to date (basically due to the fact that
Debian Jessie became oldstable...)

--Ixr8jHECx5XfEy2B
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature

--Ixr8jHECx5XfEy2B--