[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: RFC: Signed packages and translations



On Sun, Sep 02, 2001 at 04:53:16AM -0500, Manoj Srivastava wrote:
> >>"Michael" == Michael Bramer <grisu@debian.org> writes:
> 
>  Michael> A process on the ftp-master patch the deb with the
>  Michael> translation, if the translation is not alread in the the
>  Michael> package. This process don't change the package or the
>  Michael> version number- It only add the translation parts in the ar
>  Michael> file.
> 
> 	So the same file name, at dieerent times, shall have different
>  MD5Sums, and indeed, the same file on different debian archives shall
>  have different lengths and different checksums. (Did you know that an
>  X upload was rejected because it changed a file without changing
>  the version number?)
> 
> 	I don't think that signing all parts of the ar separately
>  solves this issue at all.

sorry, I don't make this proposal. 

This was only my understanding. If we can make this, if we have
problem with the debian archives, if we can solved this problems, I
don't know this all. 

I don't make comments on the points
 - 'put the translations in a extra ar element'
 and
 - make signatures on all ar elements

I don't know the archives maintainment and the dpkg framework in this
depth. I can't make real good comments on this.


Gruss
Grisu
-- 
Michael Bramer  -  a Debian Linux Developer http://www.debian.org
PGP: finger grisu@db.debian.org  -- Linux Sysadmin   -- Use Debian Linux
"Now let me explain why this makes intuitive sense."  --- Prof. Larry Wasserman

Attachment: pgpTDtCvGO5AN.pgp
Description: PGP signature


Reply to: