{"action":"created","issue":{"url":"https://api.github.com/repos/composer/composer/issues/2835","repository_url":"https://api.github.com/repos/composer/composer","labels_url":"https://api.github.com/repos/composer/composer/issues/2835/labels{/name}","comments_url":"https://api.github.com/repos/composer/composer/issues/2835/comments","events_url":"https://api.github.com/repos/composer/composer/issues/2835/events","html_url":"https://github.com/composer/composer/issues/2835","id":29958359,"number":2835,"title":"Can't install anything, man-in-the-middle attack warning","user":{"login":"iainfogg","id":7030201,"avatar_url":"https://avatars.githubusercontent.com/u/7030201?v=3","gravatar_id":"","url":"https://api.github.com/users/iainfogg","html_url":"https://github.com/iainfogg","followers_url":"https://api.github.com/users/iainfogg/followers","following_url":"https://api.github.com/users/iainfogg/following{/other_user}","gists_url":"https://api.github.com/users/iainfogg/gists{/gist_id}","starred_url":"https://api.github.com/users/iainfogg/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/iainfogg/subscriptions","organizations_url":"https://api.github.com/users/iainfogg/orgs","repos_url":"https://api.github.com/users/iainfogg/repos","events_url":"https://api.github.com/users/iainfogg/events{/privacy}","received_events_url":"https://api.github.com/users/iainfogg/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/composer/composer/labels/Support","name":"Support","color":"fef2c0"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":62,"created_at":"2014-03-22T10:17:06Z","updated_at":"2016-06-23T15:41:13Z","closed_at":"2015-06-02T11:12:18Z","body":"Hi, I've Googled this but failed to find a solution. I've just installed Wampserver, then installed Composer on WIndows 7, and this is my first time using Composer. I have a fairly simple composer.json file copied from the tutorial at http://docs.doctrine-project.org/projects/doctrine-orm/en/latest/tutorials/getting-started.html:\r\n\r\n```json\r\n{\r\n    \"name\": \"my/name\",\r\n    \"description\": \"my description\",\r\n    \"license\": \"proprietary\",\r\n    \"require\": {\r\n        \"doctrine/dbal\": \"2.4.*\",\r\n        \"symfony/console\": \"2.*\"\r\n    },\r\n    \"autoload\": {\r\n        \"psr-0\": {\"\": \"src/\"}\r\n    }\r\n}\r\n```\r\n\r\nEach time I run it, and I've run it many times, I get this error:\r\n\r\n```\r\nLoading composer repositories with package information\r\nInstalling dependencies (including require-dev)\r\n\r\n  [Composer\\Repository\\RepositorySecurityException]\r\n  The contents of http://packagist.org/p/doctrine/dbal$d904339843d0d66d194f72\r\n  4e7543073f5fb46ee97d2852bdc0ae96f2cd5cba38.json do not match its signature.\r\n   This should indicate a man-in-the-middle attack. Try running composer again and report this if you think it is a mistake.\r\n\r\ninstall [--prefer-source] [--prefer-dist] [--dry-run] [--dev] [--no-dev] [--no-plugins] [--no-custom-installers] [--no-scripts] [--no-progress] [-v|vv|vvv|--verbose] [-o|--optimize-autoloader] [packages1] ... [packagesN]\r\n```\r\n\r\nComposer seems like a great idea, but I'm completely stuck as it won't install anything at all for me! Can anyone help me sort this?\r\n\r\nThanks, Iain"},"comment":{"url":"https://api.github.com/repos/composer/composer/issues/comments/228091828","html_url":"https://github.com/composer/composer/issues/2835#issuecomment-228091828","issue_url":"https://api.github.com/repos/composer/composer/issues/2835","id":228091828,"user":{"login":"StormTide","id":819357,"avatar_url":"https://avatars.githubusercontent.com/u/819357?v=3","gravatar_id":"","url":"https://api.github.com/users/StormTide","html_url":"https://github.com/StormTide","followers_url":"https://api.github.com/users/StormTide/followers","following_url":"https://api.github.com/users/StormTide/following{/other_user}","gists_url":"https://api.github.com/users/StormTide/gists{/gist_id}","starred_url":"https://api.github.com/users/StormTide/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/StormTide/subscriptions","organizations_url":"https://api.github.com/users/StormTide/orgs","repos_url":"https://api.github.com/users/StormTide/repos","events_url":"https://api.github.com/users/StormTide/events{/privacy}","received_events_url":"https://api.github.com/users/StormTide/received_events","type":"User","site_admin":false},"created_at":"2016-06-23T15:41:13Z","updated_at":"2016-06-23T15:41:13Z","body":"@cantecim can you post the output from a -vvvv invokation, as well as the certs from a openssl s_client -connect <serverthatisfailing>:443 -CAfile /etc/ssl/certs/ca-certificates.crt (assuming on ubuntu, adjust the ca path for your os, and set the server from the -vvvv output)... if there is a MITM going on, want to know what cert is being presented. "}}
{"actor":{"display_login":"StormTide"}}