[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: md5sums files



> Peter Samuelson <peter@p12n.org> writes:
> > How many times do I have to say "the .deb also includes checksums of
> > control.tar.gz and data.tar.gz, thanks to use of the gzip container
> > format" before you notice?

[Goswin von Brederlow]
> - You download and verify the deb with the checksum in Packages.gz.
> - You unpack and some bits toggle making files corrupt.
> - You generate the md5sum from corrupt data.

What?!?  No.  You generate the md5sums file from the data.tar.gz.
-- 
Peter Samuelson | org-tld!p12n!peter | http://p12n.org/


Reply to: