rickysarraf / apt-offline

Offline APT Package Manager
http://rickysarraf.github.io/apt-offline/
GNU General Public License v3.0
218 stars 37 forks source link

check for checksum and handle appropriately #217

Closed rickysarraf closed 1 year ago

rickysarraf commented 1 year ago

Note that checksum is not always available in the signature file. For example, for the --update operation, there's no checksum in the signature. Instead, that is handled separately via GPG Repository Singing.

The checksums are only present for the build package files, like the .deb files. That's because in Debian, we only sign the repository metadata and list all checksums and other important bits, as part of that metadata

Closes: https://github.com/rickysarraf/apt-offline/issues/216 Thanks: Dan Whitman (Github:kyp44)