haskell / haskell/hackage-server

mirrors.json file is expired

Open
#834 30 comments 0 reactions 0 assignees View on GitHub
Dominant language
Haskell
Stars
467
Forks
225
PR merge metrics
No merged PRs in 30d

Description

* Actions: view https://hackage.haskell.org/mirrors.json
* Expected: `signed.expires` field will be in the future
* Actual: it's in the past, specifically yesterday

This is resulting in bug reports from users of Stack trying to initialize a new `hackage-security`-based package index:

* https://github.com/commercialhaskell/stack/issues/3731
* https://github.com/commercialhaskell/stack/issues/4927

I'm currently considering working around this by disabling the expiry checks by default in Stack's usage of `hackage-security`.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by viewing https://hackage.haskell.org/mirrors.json and checking the signed.expires value against the current date. Read the linked Stack issues for the reported initialization failures; done means the published expiry is in the future and new hackage-security-based package indexes can initialize without this failure.

Written by the indexing model from the issue text.

Assessment

Tech stack
haskell
Domain
backend
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.