checksums of packages

Bruce Dubbs bruce.dubbs at
Sun Aug 22 09:24:49 PDT 2010

Ken Moffat wrote:

>  Actually, the situation is worse than that!  For most packages
> in the BLFS book, the md5sum was generated by an editor.
> I'm sure the gentoo sha sums are similar.

It's slightly better than that.  The editor puts the checksum in the 
book, but I check them when the package is loaded on the mirror master.
That's two independent verifications.  It doesn't check as much the 
original package, but it does check that the mirror package is the same 
one the editor used.

   -- Bruce

More information about the blfs-support mailing list