distfiles / md5 / plain-text via FTP proxy

Raphael H. Becker rabe at p-i-n.com
Wed Sep 28 05:45:28 PDT 2005


On Wed, Sep 28, 2005 at 02:25:37PM +0200, Raphael H. Becker wrote:
> Disadvantage would be a lack of security (same like WITHOUT_CHECKSUM on
> distfiles). But if you have the choice ... 
[...]
> Instead of downloading a new distfile the port might trigger a CVS 
> checkout to a predefined tag or date. Virtually the sources should be 
> the same every time (but not bit-identical like a tarball).

Apropos "md5-secured" distfiles:

If you use a proxy (e.g.squid) for ftp, it might use FTP-ASCII for
transfer, not BINARY, which might result in a inband conversation from
CRLF to LF in FTP for ASCII-files (.txt, .c, ... )

Some ports with distfile patches as textfiles or plain c-Sources 
(GhostScript, squid(?), ... ) complain about bad md5-sums.

Deleting this files and refetching without proxy 
(ftp_proxy="" portupgrade -rF foo/bar) is a manual workaround for this.

In some environments you don't have ftp without a (squid)proxy.

Any idea or better workaround?

Regards
Raphael Becker


More information about the freebsd-ports mailing list