Hi,

even with the patch I send in earlier there is still a race
condition. If the debian server is updated it may happen that a
Release file is downloaded that does not match the a Package file
(because the package file was updated in the middle by e.g. a mirror
run). This is something that happens with apt sometimes and can be
solved by a second apt-get update run. 

Now apt-proxy and makes this apt problem worse because if that
condition happens it will be there for min_refresh_delay time. All
clients will get checksum mismatch or gpg failures for that time.

I think the "right" solution would be to extend FileVerifier to read
the md5 information from the Release file and discard Package/Source
files that do not match the checksum.

Cheers,
 Michael

-- 
Linux is not The Answer. Yes is the answer. Linux is The Question. - Neo


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to