Control: retitle -1 dscverify: dscverify: please use libdpkg-perl for .dsc parsing and verification
Hi, On Fri, 26 Aug 2016 09:35:20 +0200 Johannes Schauer <[email protected]> wrote: > dscverify currently uses multiple regexes to parse a .dsc. Instead > libdpkg-perl could be used. The advantages would be: > > - shorter code of dscverify > - always using the latest hash sum algorithms > - less surface for bugs to appear > - automatic support for other signed deb822 formats with file lists > > If you would appreciate a conversion of the current dscverify code to > libdpkg-perl, then please shout. I have experience with using the dpkg's > perl api from using it for sbuild and I can easily provide a patch if > that would be appreciated by the devscript maintainers. I just learned from Guillem that a dpkg tool is in the works with similar capabilities as dscverify. It is called dpkg-sign and can also be used for signature and checksum verification: https://git.hadrons.org/cgit/debian/dpkg/dpkg.git/tree/scripts/dpkg-sign.pl?h=pu/dpkg-sign Thus, most of what dscverify does will become obsolete in the near future. Thanks! cheers, josch
signature.asc
Description: signature
