[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#576420: apt-get --print-uris hash not always MD5



Hi Andreas Miller,

2010/4/4 Andreas Miller <andreas.miller@sec-xtreme.com>:
> the hash value of apt-get with print-uris depends on the hash-algorithms used in the Packages-Files.

Yes it does and it does so since at least 0.7.7 - or in other words
since the 23. Oct 2007 (The acquire method uses always the strongest
hash available).


> In the documentation (man-page) no prefix of the hash-algorithm is mentioned and no option to select the wanted hash
> algorithm can be found.
I don't know what you mean with prefix here, but this MD5Sum: or similar is
intended to indicate which hashmethod is used for the hash.


> Therefore reformatting the jigdo-data for a given debian package is not possible anymore.
> I.E.
> <MD5SUM>=<PATH>
> beMtkDN2NXZ32JIORntsoQ=http://ftp.de.debian.org/debian/pool/main/r/reportbug/reportbug_3.48_all.deb
>
> Workaround: Remove SHA256: and SHA1: lines from Packages-Files in /var/lib/apt/lists with sed.

Attached is a patch which can be used to force the usage of a specific
hashmethod. apt-get will use this in --print-uris commands to force md5sum
if the user hasn't forced another method already.
Is that what you need/request?


Best regards / Mit freundlichen Grüßen,

David Kalnischkies

Attachment: forcehash.patch
Description: Binary data


Reply to: