DVDRip / lsdvd problem

[Dries Verachtert]

On Tuesday 22 August 2006 15:22, Dag Wieers wrote:
> On Tue, 22 Aug 2006, Matthias Saou wrote:
> > Andre Costa wrote :
> > > BTW, just saw that dvd::rip v0.98.0 just came out yesterday. Changelog
> > > looks impressive, hope it hits shows up here soon... ;-)
> >
> > The new dvdrip will be available on freshrpms.net today ;-)
> >
> > About the lsdvd issue : IIRC, the current and latest release of lsdvd
> > had a nasty bug that brought the author to overwrite the tarball with a
> > fixed one, keeping the same file name... this is obviously something
> > that should never be done, since it brings problems like the one
> > reported here.
>
> Though it would be nice to have:
>
>  1. A list of md5sums and sha1sums of sources used in RPM packages
>  2. A location where we put arbitrary sources that have been extracted
>     from subversion/CVS
>
> We discussed 2. before but never actually got to implement it.
> I think 1. would be a very interesting addition as it adds a layer of
> security on top of what we have.
>
> > Dries needs to remove the source he has and re-download the latest
> > available one, then the problem should be fixed.

It would be very handy if all those checksums are available when someone 
commits an update or a new spec file. The md5sums and sha1sums change 
together with spec file updates/additions, so it would be nice to keep them 
in the spec file or in a file in the same directory as the spec file i guess. 

So how exactly are we going to store them?

Dries