[oe] checksums situation

[Bernhard Guillon]

Marcin Juszkiewicz wrote:
> Other was to use filename as key and add "url[0-xx]" fields which will 
> list alternative locations. This one looks better but still does not 
> solve situation when someone use DEBIAN_MIRROR which is not present in 
> checksums.ini file.
>
>   
What about using the hashes as identifier:

Something like this:

filename=foo-0.13.49.tar.bz2
url[0-xx]
generated_url[0-xx] //or only [0-xx]
md5=5f7b88ebb2bcd7e8044328482d079661
sha256=f57c4e33eb2cdd87a6c2f01bfa4794340fbe61ea1a1cfc7dac3b6671e1dd22af

pseudo code:
download source
check_ok:=false

if SRC_URI exists in url/generated_url + filename
    do normal check
else
    generate md5 and sha256 sums of the source
    look up md5 and sha256 sum
    if both exists in the same entity
       if filename matches filename of SRC_URI
          check_ok:=true
          add url to generated_urls

best regards
Bernhard Guillon