mirrors.json file is expired

[snoyberg]

• Actions: view https://hackage.haskell.org/mirrors.json
• Expected: signed.expires field will be in the future
• Actual: it's in the past, specifically yesterday

This is resulting in bug reports from users of Stack trying to initialize a new hackage-security-based package index:

• Verification error: <repo>/mirrors.json is expired commercialhaskell/stack#3731
• mirrors.json expired: stack build has suddenly stopped working in all my projects commercialhaskell/stack#4927

I'm currently considering working around this by disabling the expiry checks by default in Stack's usage of hackage-security.

[gbaz]

Should be fixed now?

[gbaz]

confirmed.

[snoyberg]

Yes, the current situation is fixed, but this is the second time we've received bug reports about out of date files. Do you have any method in place to prevent the problem from happening again in the future?

[roberth]

It has expired again. Current value:

{"signatures":[{"keyid":"772e9f4c7db33d251d5c6e357199c819e569d130857dc225549b40845ff0890d","method":"ed25519","sig":"/vKO+Kt4025DVUdV0jWUr/EO5MrCrEwacNzH1YdrMj7kdSR0YehjZB96Pe2vr0EI9fflJ6zrOk9Yjl1FdZmqCQ=="}],"signed":{"_type":"Mirrorlist","expires":"2021-01-01T23:59:59Z","mirrors":[{"urlbase":"http://hackage.fpcomplete.com/"},{"urlbase":"http://objects-us-east-1.dream.io/hackage-mirror/"}],"version":7}}

[gbaz]

thanks for the ping, on it. hopefully we can turn key management over to the hackage foundation and professionalize all this in the next year or so. cc @emilypi

[gbaz]

ok, new one should be deployed thanks to duncan.

[roberth]

I can confirm that it works. Thank you gbaz and duncan!

[emilypi]

Cheers! Thanks @roberth and @gbaz

[tp-woven]

I'm seeing this error again: "expires":"2022-06-01T23:59:59Z"

[gbaz]

on it, thanks for the report.

[gbaz]

I am not a holder of the appropriate keys, but I'm reaching out to them now to try to resolve this. Additionally, now that the HF is more stabilized, I will work to try to get this and other keyholding business taken care of by the foundation as a standard place rather than having it distributed in ways that are a bit rather fiddly and can unfortunately fall through the cracks.