Hi,

> > Shouldn't be too hard ti implement what you say; but I am doubtful if it's
> > really feasible or easy to maintain the hash sum on developer side.
> 
> The dpatch-get-origtargz script should have a mechenism to provide a hashsum 
> verification, not the sums themselves, which will be provided by the 
> packager. E.g.: dpatch-get-origtargz <origtardir> <exact_url> <hashsum>
> I think this could be called from debian/rules to bootstrap the fetch and the 
> build at once.


That's the main problem I see with this approach; the maintainer
has to update the sums.

Optionally allowing this might be a not-too-bad idea.


regards,
        junichi


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to