The following commit has been merged in the master branch:
commit 8b2b9d9f33f26e54160d7b641d2a6d94c8301d34
Author: Guillem Jover <[EMAIL PROTECTED]>
Date: Fri Aug 15 08:54:41 2008 +0300
man/: Improve authentication and checksum support comment in .debsa
Closes: #492052
diff --git a/ChangeLog b/ChangeLog
index 6821015..636f0fd 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,8 @@
+2008-08-15 Guillem Jover <[EMAIL PROTECTED]>
+
+ * man/dpkg-deb.1 (BUGS): Improve comment about missing authentication
+ and checksum support in .deb files.
+
2008-08-05 Guillem Jover <[EMAIL PROTECTED]>
* lib/ehandle.c: Include <dpkg-priv.h>.
diff --git a/debian/changelog b/debian/changelog
index 9d518c0..3daf09f 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -31,6 +31,8 @@ dpkg (1.15.0) UNRELEASED; urgency=low
* Do not leave new conffile as .dpkg-new when it has been diverted, also
properly activate the file trigger for the diverted conffile.
Based on a patch by Timothy G Abbott. Closes: #58735, #476899
+ * Improve comment on BUGS section in dpkg-deb.1 about lack of authentication
+ and checksum support in .deb files. Closes: #492052
[ Raphael Hertzog ]
* Enhance dpkg-shlibdeps's error message when a library can't be found to
diff --git a/man/dpkg-deb.1 b/man/dpkg-deb.1
index 7fa1123..a071770 100644
--- a/man/dpkg-deb.1
+++ b/man/dpkg-deb.1
@@ -227,6 +227,10 @@ does the wrong thing.
There is no authentication on
.B .deb
files; in fact, there isn't even a straightforward checksum.
+(Higher level tools like APT support authenticating \fB.deb\fP packages
+retrieved from a given repository, and most packages nowadays provide an
+md5sum control file generated by debian/rules. Though this is not directly
+supported by the lower level tools.)
Do not attempt to use just
.B dpkg\-deb
--
dpkg's main repository
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
