From owner-freebsd-stable Sat Mar 21 10:29:54 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id KAA05336 for freebsd-stable-outgoing; Sat, 21 Mar 1998 10:29:54 -0800 (PST) (envelope-from owner-freebsd-stable@FreeBSD.ORG) Received: from portwwwbus.tc.cc.va.us (portwwwbus.tc.cc.va.us [164.106.211.16]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id KAA05331 for ; Sat, 21 Mar 1998 10:29:47 -0800 (PST) (envelope-from djflow@portwwwbus.tc.cc.va.us) Received: from localhost (djflow@localhost) by portwwwbus.tc.cc.va.us (8.8.5/8.8.5) with SMTP id NAA08725; Sat, 21 Mar 1998 13:28:55 -0500 (EST) Date: Sat, 21 Mar 1998 13:28:54 -0500 (EST) From: Derek Flowers To: Robert Watson cc: Wes Peters - Softweyr LLC , "Daniel O'Callaghan" , stable@FreeBSD.ORG Subject: Re: after the release ... In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk On Fri, 20 Mar 1998, Robert Watson wrote: > On Fri, 20 Mar 1998, Derek Flowers wrote: > > > Why not model it after RPM? If the size and md5 do not match, return an > > error. Allow the user to overide the check if they wish to do so. > > > > Just to get a feel for pkg_add, what are the stpes taken to add the > > software? I'm thinking the check could be done in the install script, > > assuming it executes a script like make would. > > Errr. How do you know that the md5 is right? Digital signatures have to > come into this somewhere :). Or secure trusted transmission (i.e., the > HTTPS idea). Sorry, forgot to mention that RPM uses PGP fingerprints also. The MD5 can be stored on ftp.freebsd.org where everybody can check it. ---------------------------------------- Derek Flowers djflow@erols.com http://portwwwbus.tc.cc.va.us/~djflow "640K ought to be enough for anybody." -Bill Gates, circa 1981 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message