| # Test mismatched sums in go.sum files |
| |
| ! go run ./a |
| cmpenv stderr want-error |
| |
| -- want-error -- |
| verifying rsc.io/sampler@v1.3.0/go.mod: checksum mismatch |
| downloaded: h1:T1hPZKmBbMNahiBKFy5HrXp6adAjACjK9JXDnKaTXpA= |
| $WORK${/}gopath${/}src${/}a${/}go.sum: h1:U1hPZKmBbMNahiBKFy5HrXp6adAjACjK9JXDnKaTXpA= |
| |
| SECURITY ERROR |
| This download does NOT match an earlier download recorded in go.sum. |
| The bits may have been replaced on the origin server, or an attacker may |
| have intercepted the download attempt. |
| |
| For more information, see 'go help module-auth'. |
| -- go.work -- |
| go 1.18 |
| |
| use ./a |
| use ./b |
| -- a/go.mod -- |
| go 1.18 |
| |
| module example.com/hi |
| |
| require "rsc.io/quote" v1.5.2 |
| -- a/go.sum -- |
| rsc.io/sampler v1.3.0 h1:HLGR/BgEtI3r0uymSP/nl2uPLsUnNJX8toRyhfpBTII= |
| rsc.io/sampler v1.3.0/go.mod h1:U1hPZKmBbMNahiBKFy5HrXp6adAjACjK9JXDnKaTXpA= |
| -- a/main.go -- |
| package main |
| |
| import ( |
| "fmt" |
| "rsc.io/quote" |
| ) |
| |
| func main() { |
| fmt.Println(quote.Hello()) |
| } |
| -- b/go.mod -- |
| go 1.18 |
| |
| module example.com/hi |
| |
| require "rsc.io/quote" v1.5.2 |
| -- b/go.sum -- |
| rsc.io/sampler v1.3.0 h1:HLGR/BgEtI3r0uymSP/nl2uPLsUnNJX8toRyhfpBTII= |
| rsc.io/sampler v1.3.0/go.mod h1:T1hPZKmBbMNahiBKFy5HrXp6adAjACjK9JXDnKaTXpA= |
| -- b/main.go -- |
| package main |
| |
| import ( |
| "fmt" |
| "rsc.io/quote" |
| ) |
| |
| func main() { |
| fmt.Println(quote.Hello()) |
| } |
