[Lazarus] checksums for downloads

Marc Santhoff M.Santhoff at web.de
Sun Jul 19 18:29:18 CEST 2015


On So, 2015-07-19 at 12:08 -0400, waldo kitty wrote:
> On 07/19/2015 09:29 AM, Marc Santhoff wrote:
> > On So, 2015-07-19 at 14:18 +0100, Martin Frb wrote:
> >> I am not aware of them being separately published (except for the ones
> >> on sourceforge, which are calculated by sourceforge).
> >
> > I think it may be only little effort to publish those sums on the
> > website or put a file mdsums.txt aside wioth the downloads.
> 
> ideally there would be one md5sum file for each individual file available for 
> download... this way, one can check the remote checksum file with a local one to 
> see if the file has been updated since the checksums would be different... we 
> use this for automated update mechanisms...

Indeed, you're right. And then it would even better to have the archives
signed with a gpg key of the developer(s) tracable to the root cert. But
I wanted to keep things simple, not demanding too much. ;)

-- 
Marc Santhoff <M.Santhoff at web.de>





More information about the Lazarus mailing list