Subject: apt-mirror should check component listing md5sums Package: apt-mirror Version: 0.4.4-2 Severity: normal
If the source mirror has errors, these are reproduced in the local mirror. If apt-mirror wants to guarantee no local inconsistencies it needs to check files coming from the server. Otherwise apt-mirror is only guaranteeing that no additional errors will be introduced. One such error is if a component's packages listing file (eg: dists/testing/main/binary-i386/Packages.gz) md5sum, length, or SHA1 does not match the listed md5sum (inside dists/testing/Release). Please check for this and other possible server inconsistencies (eg: deb files not found). Perhaps a "strict" command-line option should be added which fails if any of the checks fail. -- System Information: Debian Release: testing/unstable APT prefers testing APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.16-2-686 Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Versions of packages apt-mirror depends on: ii perl 5.8.8-6.1 Larry Wall's Practical Extraction ii perl-modules 5.8.8-6.1 Core Perl modules ii wget 1.10.2-2 retrieves files from the web apt-mirror recommends no packages. -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
