[Rpm-maint] [rpm-software-management/rpm] RFE: read sources checksums from the SPEC file and verify them (#463)

[Dirk Mueller]

I like the idea and I came up with a similar syntax some time ago (just in my head): 

```

Source0:      https://host/path/to/tarball.tar.gz
Source0(sha512):   <sha512sum>
Source0(sha1): <sha1>

```

if any of those are set, rpm should (always, optionally?) check the checksum before starting with %prep. potentially it could also be simply implemented inside %setup/%autosetup, that might be sufficient. 

if the general idea is liked, I might give it a try to implement that. 

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/463#issuecomment-1474037392
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/issues/463/1474037392 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20230317/4f58b143/attachment.html>