On Monday 01 May 2006 22:05, Don Armstrong wrote: > On Mon, 01 May 2006, George Danchev wrote: > > 1) Since debian/copyright already contains the upstream URL I would > > add also the hashes against it in a machine parsable way: > > > > It was downloaded from ftp://ftp.coolsite.org/dir/file-1.2.tar.gz > > md5sum: paranoiccyphers > > sha1sum: extraparanoiccyphers > > That's not useful; far better to look at the original .dsc. Finally, > changing it automatically will just end up with it being the same as > the orig.tar.gz put in the .dsc...
We won't have .dsc at that stage at all. The sponsor could checkout my debian/ directory from a scm repo we both have access to or I can send it to him gpg signed and he can start off the reviewing and building process from there. That's all. > the copyright file isn't designed > to have that information in it in the first place. I do not see why it is not. File uri along a digest(s) is the only way to strictly declare which upstream tarball we are talking about. -- pub 4096R/0E4BD0AB 2003-03-18 <people.fccf.net/danchev/key pgp.mit.edu> fingerprint 1AE7 7C66 0A26 5BFF DF22 5D55 1C57 0C89 0E4B D0AB -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
