[oe] checksums situation

[GNUtoo]

> Marcin Juszkiewicz wrote:
>> Other was to use filename as key and add "url[0-xx]" fields which will
>> list alternative locations. This one looks better but still does not
>> solve situation when someone use DEBIAN_MIRROR which is not present in
>> checksums.ini file.
>>
>>
> What about using the hashes as identifier:
>
> Something like this:
>
> filename=foo-0.13.49.tar.bz2
> url[0-xx]
> generated_url[0-xx] //or only [0-xx]
> md5=5f7b88ebb2bcd7e8044328482d079661
> sha256=f57c4e33eb2cdd87a6c2f01bfa4794340fbe61ea1a1cfc7dac3b6671e1dd22af
>
> pseudo code:
> download source
> check_ok:=false
>
> if SRC_URI exists in url/generated_url + filename
>     do normal check
> else
>     generate md5 and sha256 sums of the source
>     look up md5 and sha256 sum
>     if both exists in the same entity
>        if filename matches filename of SRC_URI
>           check_ok:=true
>           add url to generated_urls
>
> best regards
> Bernhard Guillon
great idea...
but we also need to find out how to handle the commits of suchs generateds
urls?
because some developers forget to commit the checksums,and because they
could have differents repositories
Denis.