> Peter Samuelson <pe...@p12n.org> writes: > > How many times do I have to say "the .deb also includes checksums of > > control.tar.gz and data.tar.gz, thanks to use of the gzip container > > format" before you notice?
[Goswin von Brederlow] > - You download and verify the deb with the checksum in Packages.gz. > - You unpack and some bits toggle making files corrupt. > - You generate the md5sum from corrupt data. What?!? No. You generate the md5sums file from the data.tar.gz. -- Peter Samuelson | org-tld!p12n!peter | http://p12n.org/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20100307203918.gn18...@p12n.org
