jeremiah at jeremiahfoster
Aug 15, 2011, 3:32 AM
Post #1 of 1
-----BEGIN PGP SIGNED MESSAGE-----
Fwd: Debian derivatives census: missing SHA-1 hashes
Getting involved in the Debian Derivative Census is a great way to preserve the life of your Maemo software and potentially expand your user base. This forwarded email contains a lot more information and some requests for the use of SHA1 sums in the Maemo archive.
Begin forwarded message:
> Resent-From: debian-derivatives [at] lists
> From: Paul Wise <pabs [at] debian>
> Date: August 14, 2011 23:48:09 GMT+02:00
> To: debian-derivatives <debian-derivatives [at] lists>
> Subject: Debian derivatives census: missing SHA-1 hashes
> Hi all,
> If you are receiving this mail that means you are participating in the
> Debian derivatives census and that your entry has an issue.
> Please ensure that:
> 1. Your APT repositories have SHA-1 hashes for every source and
> binary package so we can compare with old Debian packages.
> 2. If you are using SHA-1 hashes in your APT repositories, please
> ensure that there is such a hash for every single file,
> especially for all the source package files.
> 3. SHA-256 hashes are not and will not be used by the census, but
> Debian strongly encourages the use of hashes stronger than
> The reason for these is that we are pursuing integration of information
> about packages from derivatives into Debian infrastructure and that
> integration will be using SHA-1 hashes to determine if packages were
> ever in Debian. Please note that if you are inheriting Packages or
> Sources files from Debian then missing SHA-1/SHA-256 hashes could be the
> fault of the Debian archive (http://bugs.debian.org/637563).
> In addition please make sure there is a contact point listed in the
> maintainer field of your census page.
> While you are editing your page, please fill in as much of the fields as
> you have data for.
> Please direct any questions you have to the derivatives list or IRC
> channel. We strongly encourage you to join both of these.
> 1. http://wiki.debian.org/Derivatives/Census
> 2. http://wiki.debian.org/Derivatives/CensusTemplate
> 3. http://lists.debian.org/debian-derivatives
> 4. irc://irc.oftc.net/debian-derivatives
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (Darwin)
-----END PGP SIGNATURE-----
maemo-community mailing list
maemo-community [at] maemo