Rules of the game for checksums in portfiles
jmr at macports.org
Sun Feb 21 23:24:03 PST 2010
On 2010-2-22 16:03 , Scott Haneda wrote:
> On Feb 21, 2010, at 11:29 AM, Joshua Root wrote:
>> On 2010-2-22 06:03 , Marko Käning wrote:
>>> in documentation for Portfiles there are 3 different checksums shown...
>>> I am wondering whether all three are acutally necessary or whether md5 is sufficient for setting up acceptable Portfiles.
>> Only one checksum is *required*. However, enough doubt has been cast on
>> the security of md5 that it is prudent to use another hash function. And
>> since `port -v checksum` instantly produces a checksums line for you,
>> why not use 3?
> Well, that is certainly handy, thank you!
> Any idea what I am doing wrong here:
> $sudo port -v checksum memtester
> ---> Computing dependencies for memtester.
> ---> Fetching memtester
> ---> Verifying checksum(s) for memtester
> ---> Checksumming memtester-4.1.2.tar.gz
Nothing's wrong, the checksums match so nothing is printed.
More information about the macports-users