Closed jacrys closed 8 years ago
Thank you for your pull request. I noticed you calculated the sha1 and sha256 digests of the archive file itself. However, Zero Install uses a hash over the individual files inside the archive. This allows us to check whether an implementation is still unmodified after the archive has been extracted.
We have a bunch of tools that can help creating and updating feeds with the right hashes. All the nitty gritty details of the hashing logic are documented here in case you are interested.
I have created a new commit 18300d6 that updates cURL to the new version and download URL you provided. The feed is also live at: http://0install.de/feeds/cURL.xml
Added path for new version