Rules of the game for checksums in portfiles

[Joshua Root]

On 2010-2-22 16:03 , Scott Haneda wrote:
> On Feb 21, 2010, at 11:29 AM, Joshua Root wrote:
> 
>> On 2010-2-22 06:03 , Marko Käning wrote:
>>> Hi,
>>>
>>> in documentation for Portfiles there are 3 different checksums shown...
>>>
>>> I am wondering whether all three are acutally necessary or whether md5 is sufficient for setting up acceptable Portfiles.
>>
>> Only one checksum is *required*. However, enough doubt has been cast on
>> the security of md5 that it is prudent to use another hash function. And
>> since `port -v checksum` instantly produces a checksums line for you,
>> why not use 3?
> 
> Well, that is certainly handy, thank you!
> Any idea what I am doing wrong here:
>     $sudo port -v checksum memtester
>     --->  Computing dependencies for memtester.
>     --->  Fetching memtester
>     --->  Verifying checksum(s) for memtester
>     --->  Checksumming memtester-4.1.2.tar.gz
> 

Nothing's wrong, the checksums match so nothing is printed.

- Josh