FTP packages missing CHECKSUM.MD5

[Martin Wilke]

Hey,

Thanks for your report I will take care of that.

On Apr 12, 2013, at 2:15 AM, grarpamp <grarpamp at gmail.com> wrote:

> Noticed that at least ports/i386/packages-9-stable is missing
> its CHECKSUM.MD5 file.
> 
> Of course people shouldn't use it for what they think it's for,
> because it's not signed and uses a broken hash function.
> Hopefully that will be updated to signed sha1/256/3 before long.
> 
> However it does make for a good 'TIMESTAMP' file to detect when
> new packages appear. Ftp's internal or external 'ls -tT' can't be counted
> on for this across mirrors because such options to ls are mirror dependant.
> And there's no simple way to locally sort the ftp list output by date
> without rigging in perl, etc. And an overwrite of the same file may not
> stamp the parent directory, which also doesn't appear reliably '.' while
> in the current directory.
> 
> In short, I'd suggest making a formal TIMESTAMP file for when package
> updates are pushed out so people can key off that instead.
> _______________________________________________
> freebsd-ports at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-ports
> To unsubscribe, send any mail to "freebsd-ports-unsubscribe at freebsd.org"
> 


+-----------------oOO--(_)--OOo-------------------------+
With best Regards,
       Martin Wilke (miwi_(at)_FreeBSD.org)

Mess with the Best, Die like the Rest