Hash mismatch during install of LastPass via Chocolatey

Help with the Windows installer (lastpass.exe)

Moderators: admin, anatoly_LP, chantieLP, JoeSiegrist, robyn

Hash mismatch during install of LastPass via Chocolatey

Postby darren10101 » Mon Sep 11, 2017 8:51 pm

New to board, but not to LastPass.

Attempting to install LastPass onto a new company laptop via the Chocolatey package manager in Windows 10, and when I do a "choco install lastpass", I get the following error:

Error - hashes do not match. Actual value was 'E7669669DD2D7440E28C2C20E7194C6207BD55C092E78D60D576967508DD7BBF'.
ERROR: Checksum for 'C:\Users\darren\AppData\Local\Temp\chocolatey\lastpass\4.1.44.20170630\lastpass_x64.exe' did not meet '873018f4d1dee578b35cd8171f8074f92c7fc01dab9fc695f30bf279e74e8bff' for checksum type 'sha256'. Consider passing the actual checksums through with --checksum --checksum64 once you validate the checksums are appropriate. A less secure option is to pass --ignore-checksums if necessary.

I tried again (thinking it might be transient), but got the same result. Any suggestions? Am I doing something wrong here? I do not want to open myself up to a security hole, especially with LastPass, so I am hesitant to hack around and blindly attempt the "--checksum" and "--checksum64" options provided in the error message.

For reference, here is the FULL OUTPUT (in case it helps):

C:\Windows\system32>choco install lastpass
Chocolatey v0.10.8
Installing the following packages:
lastpass
By installing you accept licenses for the packages.
Progress: Downloading lastpass 4.1.44.20170630... 100%

lastpass v4.1.44.20170630 [Approved]
lastpass package files install completed. Performing other installation steps.
The package lastpass wants to run 'chocolateyInstall.ps1'.
Note: If you don't run this script, the installation will fail.
Note: To confirm automatically next time, use '-y' or consider:
choco feature enable -n allowGlobalConfirmation
Do you want to run the script?([Y]es/[N]o/[P]rint): Y

Downloading lastpass 64 bit
from 'https://lastpass.com/download/cdn/lastpass_x64.exe'
Progress: 100% - Completed download of C:\Users\darren\AppData\Local\Temp\chocolatey\lastpass\4.1.44.20170630\lastpass_x64.exe (95.26 MB).
Download of lastpass_x64.exe (95.26 MB) completed.
Error - hashes do not match. Actual value was 'E7669669DD2D7440E28C2C20E7194C6207BD55C092E78D60D576967508DD7BBF'.
ERROR: Checksum for 'C:\Users\darren\AppData\Local\Temp\chocolatey\lastpass\4.1.44.20170630\lastpass_x64.exe' did not meet '873018f4d1dee578b35cd8171f8074f92c7fc01dab9fc695f30bf279e74e8bff' for checksum type 'sha256'. Consider passing the actual checksums through with --checksum --checksum64 once you validate the checksums are appropriate. A less secure option is to pass --ignore-checksums if necessary.
The install of lastpass was NOT successful.
Error while running 'C:\ProgramData\chocolatey\lib\lastpass\tools\chocolateyInstall.ps1'.
See log for details.

Chocolatey installed 0/1 packages. 1 packages failed.
See the log for details (C:\ProgramData\chocolatey\logs\chocolatey.log).

Failures
- lastpass (exited -1) - Error while running 'C:\ProgramData\chocolatey\lib\lastpass\tools\chocolateyInstall.ps1'.
See log for details.
darren10101
 
Posts: 1
Joined: Mon Sep 11, 2017 8:43 pm

Re: Hash mismatch during install of LastPass via Chocolatey

Postby cfoellmann » Thu Oct 12, 2017 9:47 am

As you can see the download url for the lastpass installer never changes. But lastpass updates the file regularly to a new version.
Everytime the installer is updated the hashes in the chocolatey repo would need to reflect that. It does not because an update to the file can not be detected by the chocolatey repo.
cfoellmann
 
Posts: 1
Joined: Thu Oct 12, 2017 9:44 am


Return to Windows Installer Questions

Who is online

Users browsing this forum: Google [Bot] and 4 guests