Install CD with lzma compression

Colin Watson cjwatson at
Thu Jan 5 02:04:24 GMT 2006

On Wed, Jan 04, 2006 at 08:38:59PM -0500, Phillip Susi wrote:
> Also I am not sure, but I don't think the signatures woule be made
> invalid by changing the compression.  The data files are all checked
> via their md5 sum, which would remain the same once extracted, and the
> control file that lists their md5 sums also would be the same once
> extracted, and it is that file that is signed ( I believe ).

That's very much incorrect; apt's signature checking is based on the
md5sum of the whole .deb.

Colin Watson                                       [cjwatson at]

More information about the ubuntu-devel mailing list