Install CD with lzma compression

Colin Watson cjwatson at ubuntu.com
Thu Jan 5 02:04:24 GMT 2006


On Wed, Jan 04, 2006 at 08:38:59PM -0500, Phillip Susi wrote:
> Also I am not sure, but I don't think the signatures woule be made
> invalid by changing the compression.  The data files are all checked
> via their md5 sum, which would remain the same once extracted, and the
> control file that lists their md5 sums also would be the same once
> extracted, and it is that file that is signed ( I believe ).

That's very much incorrect; apt's signature checking is based on the
md5sum of the whole .deb.

-- 
Colin Watson                                       [cjwatson at ubuntu.com]



More information about the ubuntu-devel mailing list