> Hi,
>
> On Wed, Jun 21, 2017 at 05:25:32PM +0200, Simon Matter wrote:
>> > .gz is built with "make distcheck", .xz right after from the same
>> > tree with "make dist-xz".
>> >
>> > What differs?
>>
>> The check sum of both extracted tarballs, not really their content.
>
> Ah. Yeah, that's one of the drawbacks of building two independent
> tarballs - timestamps in the tar header (IIRC), so the end result always
> differs in a few bytes.
>
>> I suggest to create .xz from .gz instead of building another tarball.
>> That
>> way the extracted tarballs from .gz and .xz share the same checksum ->
>> less confusion in case something goes wrong - as it did with 2.4.2 and
>> now.
>
> David, you're listening? Should be an easy-enough change from what
> we have now... ("gunzip <...tar.gz | xz >...tar.xz" or however you
> do xz balls) :-)
One more idea to make things go even smoother: In the release announcement
mails, you could also add the check sums for each release. That way
whatever Cloadflare delivers, one can check the sums which were received
trough a different channel.
Regards,
Simon
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel
