Re: Debian derivatives census: missing SHA-1 hashes

[Christian Hofstaedtler <ch@grml.org>]

* Paul Wise <pabs@debian.org> [110817 17:03]:
> On Wed, Aug 17, 2011 at 11:26 AM, Karl Goetz wrote:
> 
> > Does this mean any derivative with a package from debian currently older
> > then 2008 has no sha-1?
> 
> Yes, if they are directly importing Packages and Sources files rather
> than generating their own such files.
> 
> > If so, should derivatives be rebuilding the
> > packages to ensure a sha1 is present?
> 
> It should be enough to calculate the hashes that are missing.

So one of the problems we're currently having is that reprepro
apparently won't add the missing SHA*Sums fields to existing
Packages/Sources entries, even though the checksums are in it's
database.

Has anyone already worked around this?
I imagine we're not alone with reprepro.

Thanks,
  -ch

-- 
christian hofstaedtler