Morphix Repository - .deb Hash Sum mismatch

"Brendan Sleight" <[email protected]> Sun, 25 Nov 2007 22:54:52 +0000
Newsgroups gmane.linux.morphix.devel
Message-ID <[email protected]>
Hi Alex et al,

Regarding the error seen in sid main-module autobuilds but not etch;
".deb  Hash Sum mismatch"
  http://www.morphix.org/autobuilds/mainmod/sid/morphix-gnome-2007-11-25_0416.log
  http://www.morphix.org/autobuilds/mainmod/etch/morphix-gnome-2007-11-25_0018.log

I notice that each packages in the morphix packages list are now
signed with SHA256, but the release file hs not been signed with
SHA256.
  http://www.morphix.org/debian/unstable/Packages.gz
  http://www.morphix.org/debian/unstable/Release

I think sid requires both the Package and Releases files to be signed
by sha256 now, since apt 0.7.7
http://packages.debian.org/changelogs/pool/main/a/apt/apt_0.7.9/changelog

Sorry do not have a sid machine at the moment to verify, but this is my guess.

'nextime' solved the 'Hash Sum' error for this it for his repository
by forcing to check for md5sum, which his release file was signed
against.

Regards,
Brendan

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/