<pre style='margin:0'>
Perry E. Metzger (pmetzger) pushed a commit to branch master
in repository macports-guide.
</pre>
<p><a href="https://github.com/macports/macports-guide/commit/31e7625f2e736a981006053b7ebc20223e86122e">https://github.com/macports/macports-guide/commit/31e7625f2e736a981006053b7ebc20223e86122e</a></p>
<pre style="white-space: pre; background: #F8F8F8">The following commit(s) were added to refs/heads/master by this push:
<span style='display:block; white-space:pre;color:#404040;'> new 31e7625 Add info about the checksum's size field
</span>31e7625 is described below
<span style='display:block; white-space:pre;color:#808000;'>commit 31e7625f2e736a981006053b7ebc20223e86122e
</span>Author: Herby Gillot <herby.gillot@gmail.com>
AuthorDate: Mon Aug 20 13:17:56 2018 -0400
<span style='display:block; white-space:pre;color:#404040;'> Add info about the checksum's size field
</span>---
guide/xml/portfile-phase.xml | 10 +++++++---
guide/xml/portfiledev.xml | 12 ++++++++----
2 files changed, 15 insertions(+), 7 deletions(-)
<span style='display:block; white-space:pre;color:#808080;'>diff --git a/guide/xml/portfile-phase.xml b/guide/xml/portfile-phase.xml
</span><span style='display:block; white-space:pre;color:#808080;'>index ad27608..2385c99 100644
</span><span style='display:block; white-space:pre;background:#e0e0ff;'>--- a/guide/xml/portfile-phase.xml
</span><span style='display:block; white-space:pre;background:#e0e0ff;'>+++ b/guide/xml/portfile-phase.xml
</span><span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -1044,7 +1044,8 @@ svn.revision 2100</programlisting>
</span> <listitem>
<para>Checksum(s) of the distribution files. For ports with multiple
distribution files, filenames must be included to associate files
<span style='display:block; white-space:pre;background:#ffe0e0;'>- with their checksums.</para>
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ with their checksums. Each checksum entry should also indicate the
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ file's size.</para>
</span>
<para>At least two checksum types (typically rmd160 and sha256) should be used to
ensure the integrity of the distfiles.</para>
<span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -1058,14 +1059,17 @@ svn.revision 2100</programlisting>
</span> <para>Examples:</para>
<programlisting>checksums rmd160 0c1147242adf476f5e93f4d59b553ee3ea378b23 \
<span style='display:block; white-space:pre;background:#ffe0e0;'>- sha256 baf8a29ff721178317aac7b864c2d392b1accc02de8677dd24c18fd5717bf26e</programlisting>
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ sha256 baf8a29ff721178317aac7b864c2d392b1accc02de8677dd24c18fd5717bf26e \
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ size 1039840</programlisting>
</span>
<programlisting>checksums ${distname}${extract.suffix} \
rmd160 0c1147242adf476f5e93f4d59b553ee3ea378b23 \
sha256 883715307c31ae2c145db15d2404d89a837f4d03d7e6932aed21d1d1f21dad89 \
<span style='display:block; white-space:pre;background:#e0ffe0;'>+ size 2429530 \
</span> hobbit.tar.gz \
rmd160 82b9991f3bf0ceedbf74c188c5fa44b98b5e40c9 \
<span style='display:block; white-space:pre;background:#ffe0e0;'>- sha256 2c3afd16915e9f8eac2351673f8b599f5fd2ff9064d4dfe61f750d72bab740b3</programlisting>
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ sha256 2c3afd16915e9f8eac2351673f8b599f5fd2ff9064d4dfe61f750d72bab740b3 \
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ size 8594032</programlisting>
</span> </listitem>
</itemizedlist>
</listitem>
<span style='display:block; white-space:pre;color:#808080;'>diff --git a/guide/xml/portfiledev.xml b/guide/xml/portfiledev.xml
</span><span style='display:block; white-space:pre;color:#808080;'>index c7f9c84..15bcd1c 100644
</span><span style='display:block; white-space:pre;background:#e0e0ff;'>--- a/guide/xml/portfiledev.xml
</span><span style='display:block; white-space:pre;background:#e0e0ff;'>+++ b/guide/xml/portfiledev.xml
</span><span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -241,10 +241,12 @@
</span>
<para>The checksums specified in a Portfile are checked with the
fetched tarball for security. For the best security, use rmd160
<span style='display:block; white-space:pre;background:#ffe0e0;'>- and sha256 checksum types.</para>
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ and sha256 checksum types. Checksums should also include the target
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ file's size.</para>
</span>
<programlisting>checksums rmd160 7bbfce4fecc2a8e1ca081169e70c1a298ab1b75a \
<span style='display:block; white-space:pre;background:#ffe0e0;'>- sha256 2829fcb7393bac85925090b286b1f9c3cd3fbbf8e7f35796ef4131322509aa53</programlisting>
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ sha256 2829fcb7393bac85925090b286b1f9c3cd3fbbf8e7f35796ef4131322509aa53 \
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ size 1061530</programlisting>
</span>
<para>To find the correct checksums for a port's distribution file,
follow one of these examples:</para>
<span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -334,7 +336,8 @@ master_sites https://oss.oetiker.ch/rrdtool/pub/ \
</span> ftp://ftp.pucpr.br/rrdtool/
checksums rmd160 7bbfce4fecc2a8e1ca081169e70c1a298ab1b75a \
<span style='display:block; white-space:pre;background:#ffe0e0;'>- sha256 2829fcb7393bac85925090b286b1f9c3cd3fbbf8e7f35796ef4131322509aa53
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ sha256 2829fcb7393bac85925090b286b1f9c3cd3fbbf8e7f35796ef4131322509aa53 \
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ size 1061530
</span>
depends_lib path:bin/perl:perl5 \
port:tcl \
<span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -831,7 +834,8 @@ Ports failed: 0</screen>
</span> begins on in the first line.</para>
<programlisting>checksums rmd160 7bbfce4fecc2a8e1ca081169e70c1a298ab1b75a \
<span style='display:block; white-space:pre;background:#ffe0e0;'>- sha256 2829fcb7393bac85925090b286b1f9c3cd3fbbf8e7f35796ef4131322509aa53</programlisting>
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ sha256 2829fcb7393bac85925090b286b1f9c3cd3fbbf8e7f35796ef4131322509aa53 \
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+ size 1061530</programlisting>
</span>
<para>Should a key item such as a phase or variant require braces, the
opening brace should appear on the same line and the closing brace should
</pre><pre style='margin:0'>
</pre>