On Wed, Feb 12, 2014 at 11:58:15AM +0100, Vít Ondruch wrote:
Dne 12.2.2014 09:46, Pierre-Yves Chibon napsal(a):
So Ralph and I wrote summershum, it's a simple database storing for each file in
each package:
- the packages name
- the filename
- the sha1sum of the file
- the tarball name
- the md5sum of the tarball
I don't think we should use md5sum. It is disabled by default in recent
OpenSSL if I am not mistaken.
That's what we use in the lookaside cache (the source file in your git), so in
fact I just get this information from the fedmsg, but that's one reason why we
use sha1sum for the files.
Pierre