checksums of packages
bruce.dubbs at gmail.com
Sun Aug 22 09:24:49 PDT 2010
Ken Moffat wrote:
> Actually, the situation is worse than that! For most packages
> in the BLFS book, the md5sum was generated by an editor.
> I'm sure the gentoo sha sums are similar.
It's slightly better than that. The editor puts the checksum in the
book, but I check them when the package is loaded on the mirror master.
That's two independent verifications. It doesn't check as much the
original package, but it does check that the mirror package is the same
one the editor used.
More information about the blfs-support