Rules of the game for checksums in portfiles

[Scott Haneda]

On Feb 21, 2010, at 11:29 AM, Joshua Root wrote:

> On 2010-2-22 06:03 , Marko Käning wrote:
>> Hi,
>> 
>> in documentation for Portfiles there are 3 different checksums shown...
>> 
>> I am wondering whether all three are acutally necessary or whether md5 is sufficient for setting up acceptable Portfiles.
> 
> Only one checksum is *required*. However, enough doubt has been cast on
> the security of md5 that it is prudent to use another hash function. And
> since `port -v checksum` instantly produces a checksums line for you,
> why not use 3?

Well, that is certainly handy, thank you!
Any idea what I am doing wrong here:
    $sudo port -v checksum memtester
    --->  Computing dependencies for memtester.
    --->  Fetching memtester
    --->  Verifying checksum(s) for memtester
    --->  Checksumming memtester-4.1.2.tar.gz

-- 
Scott * If you contact me off list replace talklists@ with scott@ *