Help on 404 error .could not download source code. when doing make

when I do make from souce code 17.01 branch , got errors:
it seems could not use https://git.lede-project.org/ubox.git to get source code.
why?

make[3]: Entering directory '/media/allan/860df3c6-2793-4028-8889-a2a1c6021593/lede-git/source/package/system/ubox'
mkdir -p /media/allan/860df3c6-2793-4028-8889-a2a1c6021593/lede-git/source/dl
SHELL= flock /media/allan/860df3c6-2793-4028-8889-a2a1c6021593/lede-git/source/tmp/.ubox-2017-01-15-5649c028.tar.xz.flock -c ' /media/allan/860df3c6-2793-4028-8889-a2a1c6021593/lede-git/source/scripts/download.pl "/media/allan/860df3c6-2793-4028-8889-a2a1c6021593/lede-git/source/dl" "ubox-2017-01-15-5649c028.tar.xz" "ae77504a4397f92173a7646fa3555e5b51abd7ff1dd1c419770223359e41937a" "" || ( echo "Checking out files from the git repository..."; mkdir -p /media/allan/860df3c6-2793-4028-8889-a2a1c6021593/lede-git/source/tmp/dl && cd /media/allan/860df3c6-2793-4028-8889-a2a1c6021593/lede-git/source/tmp/dl && rm -rf ubox-2017-01-15-5649c028 && [ ! -d ubox-2017-01-15-5649c028 ] && git clone https://git.lede-project.org/project/ubox.git ubox-2017-01-15-5649c028 && (cd ubox-2017-01-15-5649c028 && git checkout 5649c028c426060616e2bd4e7ea83271cd333d21 && git submodule update --init --recursive) && echo "Packing checkout..." && export TAR_TIMESTAMP=cd ubox-2017-01-15-5649c028 && git log -1 --format='\''@%ct'\'' && rm -rf ubox-2017-01-15-5649c028/.git && tar --numeric-owner --owner=0 --group=0 --sort=name ${TAR_TIMESTAMP:+--mtime="$TAR_TIMESTAMP"} -c ubox-2017-01-15-5649c028 | xz -zc -7e > /media/allan/860df3c6-2793-4028-8889-a2a1c6021593/lede-git/source/tmp/dl/ubox-2017-01-15-5649c028.tar.xz && mv /media/allan/860df3c6-2793-4028-8889-a2a1c6021593/lede-git/source/tmp/dl/ubox-2017-01-15-5649c028.tar.xz /media/allan/860df3c6-2793-4028-8889-a2a1c6021593/lede-git/source/dl/ && rm -rf ubox-2017-01-15-5649c028; ) '
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 16876 100 16876 0 0 6397 0 0:00:02 0:00:02 --:--:-- 6394
MD5 sum of the downloaded file does not match (file: 28e5580d481a415697fbca46c160177bab6dc47a04ba7ddb73537827632b2dd6, requested: ae77504a4397f92173a7646fa3555e5b51abd7ff1dd1c419770223359e41937a) - deleting download.
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- 0:00:03 --:--:-- 0
curl: (22) The requested URL returned error: 404 Not Found
Download failed.
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- 0:00:02 --:--:-- 0
curl: (22) The requested URL returned error: 404 Not Found
Download failed.
No more mirrors to try - giving up.
Checking out files from the git repository...
Cloning into 'ubox-2017-01-15-5649c028'...
fatal: unable to access 'https://git.lede-project.org/project/ubox.git/': gnutls_handshake() failed: Error in the pull function.
Makefile:58: recipe for target '/media/allan/860df3c6-2793-4028-8889-a2a1c6021593/lede-git/source/dl/ubox-2017-01-15-5649c028.tar.xz' failed
make[3]: *** [/media/allan/860df3c6-2793-4028-8889-a2a1c6021593/lede-git/source/dl/ubox-2017-01-15-5649c028.tar.xz] Error 128
make[3]: Leaving directory '/media/allan/860df3c6-2793-4028-8889-a2a1c6021593/lede-git/source/package/system/ubox'
package/Makefile:105: recipe for target 'package/system/ubox/compile' failed
make[2]: *** [package/system/ubox/compile] Error 2
make[2]: Leaving directory '/media/allan/860df3c6-2793-4028-8889-a2a1c6021593/lede-git/source'
package/Makefile:101: recipe for target '/media/allan/860df3c6-2793-4028-8889-a2a1c6021593/lede-git/source/staging_dir/target-mips_24kc_musl-1.1.16/stamp/.package_compile' failed
make[1]: *** [/media/allan/860df3c6-2793-4028-8889-a2a1c6021593/lede-git/source/staging_dir/target-mips_24kc_musl-1.1.16/stamp/.package_compile] Error 2
make[1]: Leaving directory '/media/allan/860df3c6-2793-4028-8889-a2a1c6021593/lede-git/source'
/media/allan/860df3c6-2793-4028-8889-a2a1c6021593/lede-git/source/include/toplevel.mk:197: recipe for target 'world' failed

Update your version of git and gnutls

Listing... Done
git/unstable,unstable,now 1:2.11.0-2 amd64 [installed]

Listing... Done
gnutls-bin/unstable,unstable,now 3.5.8-5 amd64 [installed]

Listing... Done
libgnutls30/unstable,unstable,now 3.5.8-5 amd64 [installed,automatic]

no update....

Sounds like your distro is broken, works fine here.

ii  git                                    1:2.1.4-2.1+deb8u2           amd64        fast, scalable, distributed revision control system
ii  libgnutls-deb0-28:amd64                3.3.8-6+deb8u3               amd64        GNU TLS library - main runtime library

Make sure your source tree is up-to-date with the latest 17.01 branch updates.

@thess, @jow

The checksum for ubox in LEDE's 17.01 branch is

ae77504a4397f92173a7646fa3555e5b51abd7ff1dd1c419770223359e41937a (see PKG_MIRROR_HASH on line 10)

however, the ubox-2017-01-15-5649c028.tar.xz in the repository.

http://sources.lede-project.org/ubox-2017-01-15-5649c028.tar.xz

has a sha256 sum of 28e5580d481a415697fbca46c160177bab6dc47a04ba7ddb73537827632b2dd6

I think this was reported back in january.:

http://lists.infradead.org/pipermail/lede-dev/2017-February/005815.html

Thank you.

Follow-up (no solution yet):

The ubox sources in the mirror are slightly wrong

ubox-2016-09-26-5649c028.tar.xz and ubox-2017-01-15-5649c028.tar.xz are identical and from the same commit (5649c028c426060616e2bd4e7ea83271cd333d21) on 2016-09-26. The sha256 sum in the makefile is for the 09-26 tarball.

The simplest fix, since the 09-26 version of ubox is the actual released version in 17.01, we should probably fix the Makefile version in the 17.01 branch to PKG_SOURCE_DATE:=2016-09-26. Otherwise, we would be introducing a new version now if the 2017-01-15 were to be actually used (different commit and sha256 sum).

@blogic, @nbd -- You guys know which version we need - Suggest next move?