From owner-freebsd-ports@FreeBSD.ORG Wed Apr 26 00:09:24 2006 Return-Path: X-Original-To: ports@freebsd.org Delivered-To: freebsd-ports@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3996616A401 for ; Wed, 26 Apr 2006 00:09:24 +0000 (UTC) (envelope-from edwin@mavetju.org) Received: from mail2out.barnet.com.au (mail2out.barnet.com.au [202.83.176.14]) by mx1.FreeBSD.org (Postfix) with ESMTP id A9D6743D48 for ; Wed, 26 Apr 2006 00:09:23 +0000 (GMT) (envelope-from edwin@mavetju.org) Received: by mail2out.barnet.com.au (Postfix, from userid 27) id E361F7073AF; Wed, 26 Apr 2006 10:09:20 +1000 (EST) X-Viruscan-Id: <444EBA3000007E2CF02CAB@BarNet> Received: from mail2-auth.barnet.com.au (mail2.barnet.com.au [202.83.176.13]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "*.barnet.com.au", Issuer "BarNet Root Certificate Authority" (verified OK)) by mail2.barnet.com.au (Postfix) with ESMTP id 6C13C7073C4; Wed, 26 Apr 2006 10:09:20 +1000 (EST) Received: from k7.mavetju (edwin-3.int.barnet.com.au [10.10.12.2]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mail2-auth.barnet.com.au (Postfix) with ESMTP id DEFF47073AB; Wed, 26 Apr 2006 10:09:19 +1000 (EST) Received: by k7.mavetju (Postfix, from userid 1001) id D1A4E226; Wed, 26 Apr 2006 10:09:18 +1000 (EST) Date: Wed, 26 Apr 2006 10:09:18 +1000 From: Edwin Groothuis To: Vivek Khera Message-ID: <20060426000918.GA1113@k7.mavetju> References: <20060425134638.GA32017@math.uvsq.fr> <20060425135835.GA47488@math.uvsq.fr> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.2.1i Cc: ports@freebsd.org Subject: Re: shells/bash: Checksum mismatch for bash/bash31-010. X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 26 Apr 2006 00:09:24 -0000 On Tue, Apr 25, 2006 at 10:14:33AM -0400, Vivek Khera wrote: > I did a "make distclean" in the ports dir, but it worries me that the > checksum of this file has changed. It is just plain bad practice and > style to re-release a source distribution like that with the exact > same file name. It more or less totally defeats the purpose of > having checksums like this to detect transmission errors and or > compromised software (like when openssh was hacked a while back). That is exactly the reason why checksums are useful. Edwin -- Edwin Groothuis | Personal website: http://www.mavetju.org edwin@mavetju.org | Weblog: http://weblog.barnet.com.au/edwin/