Hi, even with the patch I send in earlier there is still a race condition. If the debian server is updated it may happen that a Release file is downloaded that does not match the a Package file (because the package file was updated in the middle by e.g. a mirror run). This is something that happens with apt sometimes and can be solved by a second apt-get update run.
Now apt-proxy and makes this apt problem worse because if that condition happens it will be there for min_refresh_delay time. All clients will get checksum mismatch or gpg failures for that time. I think the "right" solution would be to extend FileVerifier to read the md5 information from the Release file and discard Package/Source files that do not match the checksum. Cheers, Michael -- Linux is not The Answer. Yes is the answer. Linux is The Question. - Neo -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

