omnibus hash of cacert.pem is incorrect :-/

vagrant up output.txt

[fetcher:net::cacerts] fetching /var/cache/omnibus/cache/cacert.pem from http://curl.haxx.se/ca/cacert.pem
[fetcher:net::cacerts] getting from http://curl.haxx.se/ca/cacert.pem with 10 redirects left
[fetcher:net::cacerts] Invalid MD5 for cacerts
[fetcher:net::cacerts] Expected: 47961e7ef15667c93cd99be01b51f00a
[fetcher:net::cacerts] Actual:   349ba2d6964db9ca558c9e1daf38e428
Something went wrong...the Omnibus just ran off the road!

Error raised was:

  Checksum of downloaded file /var/cache/omnibus/cache/cacert.pem doesn't match expected

Backtrace:

	/opt/ruby1.9/lib/ruby/gems/1.9.1/gems/omnibus-1.2.0/lib/omnibus/fetchers/net_fetcher.rb:151:in `verify_checksum!'

i followed another example somewhere which works. Basically create an omnibus.rb in the root of the git clone with the following. The opscode cache has the version with the expected md5 sum.

s3_bucket "opscode-omnibus-cache"
use_s3_caching true

I ran into another problem where downloading redis.tar.gz ran into a 404. I commented out the redis dependency and created the package without it. I don't know enough about omnibus to say use the opscode cache for some things and not for others.

So yeah, this is a re-occurring problem whenever curl.haxx.se update the cacert bundle at http://curl.haxx.se/ca/cacert.pem which they seem to have just done. I was able to build omnibus-flapjack on 7 January (last week) without running into this error, however today I'm hitting it again:

[fetcher:net::cacerts] fetching /var/cache/omnibus/cache/cacert.pem from http://curl.haxx.se/ca/cacert.pem
[fetcher:net::cacerts] getting from http://curl.haxx.se/ca/cacert.pem with 10 redirects left
[fetcher:net::cacerts] Invalid MD5 for cacerts
[fetcher:net::cacerts] Expected: 349ba2d6964db9ca558c9e1daf38e428
[fetcher:net::cacerts] Actual:   6253bb1b6696a190fdf7a2062003b21c
Something went wrong...the Omnibus just ran off the road!

The date in the comment is "Thu Dec 5 09:40:49 2013" so I guess there is some lag time between the data being available (eg extracted from Mozilla) and it being made available at http://curl.haxx.se/ca/cacert.pem

Here's the commit in omnibus-software from the last time the MD5 for cacert.pem was updated:

chef/omnibus-software@994c548

omnibus-flapjack Issue created: flapjack/omnibus-flapjack#12

And resolved, the fix is in the issue.