Install CD with lzma compression
Colin Watson
cjwatson at ubuntu.com
Thu Jan 5 02:04:24 GMT 2006
On Wed, Jan 04, 2006 at 08:38:59PM -0500, Phillip Susi wrote:
> Also I am not sure, but I don't think the signatures woule be made
> invalid by changing the compression. The data files are all checked
> via their md5 sum, which would remain the same once extracted, and the
> control file that lists their md5 sums also would be the same once
> extracted, and it is that file that is signed ( I believe ).
That's very much incorrect; apt's signature checking is based on the
md5sum of the whole .deb.
--
Colin Watson [cjwatson at ubuntu.com]
More information about the ubuntu-devel
mailing list