One possible idea that doesn't require any additional package tags (which 
present their own problems) would be always calculating both pre- and 
post-decompression digest, and choose the tag to verify against based on 
whether they're equal or not. This would require payload open falling back to 
uncompressed mode if opening in compressed fails (might even already happen, 
dunno). 
There might be some challenges fitting that into the verification system though.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/861#issuecomment-534911731
_______________________________________________
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint

Reply via email to