[MacPorts] #68192: Archives can remain cached by the CDN without corresponding signature

[MacPorts]

#68192: Archives can remain cached by the CDN without corresponding signature
------------------------------+---------------------
  Reporter:  ulange-eso-org   |      Owner:  admin@…
      Type:  defect           |     Status:  new
  Priority:  Normal           |  Milestone:
 Component:  server/hosting   |    Version:  2.8.1
Resolution:                   |   Keywords:
      Port:  py39-markupsafe  |
------------------------------+---------------------

Comment (by jmroot):

 Replying to [comment:9 ryandesign]:
 > Replying to [comment:7 ulange-eso-org]:
 > > perhaps the ports command
 > > should detect that and fall back to build from source for the older
 version?
 >
 > I think that would be a good idea. MacPorts base should not assume both
 files will exist; if either one or the other doesn't exist, it should try
 the next packages mirror or build from source. It should try fetching the
 rmd160 file first, since it's smaller.

 Attempting to fetch the .rmd160 from other mirrors complicates the logic a
 bit, but is doable. Falling back to building from source when only the
 .rmd160 is missing is much harder than it sounds. It would require the
 dependencies to be recomputed, since building may need dependencies that
 installing from an archive does not.

-- 
Ticket URL: <https://trac.macports.org/ticket/68192#comment:10>
MacPorts <https://www.macports.org/>
Ports system for macOS