Re: 1.7.0-alpha3 tarballs up for testing / signing

[Senthil Kumaran S]
> In the above sha1sum of .bz2 file matches with whatever is published
> on the download link, but on the other hand, when I convert the bz2
> file to tar.gz, the sha1sum does not match the one provided in the
> download link for tar.gz, which was not the case in past.

Historically the "uncompress / recompress / get original compressed
file" process has been noticeably more reliable with bzip2 than gzip.
Probably because there is only one canonical bzip2 implementation,
whereas there are quite a few implementations of the gzip algorithm,
and they will not necessarily all produce exactly the same compressed
output. gzip also has tuning flags such as --rsyncable (may still be
Debian-specific, I'm not sure) which bzip2 does not.

Thus if you want to only download one file, and check the checksum of
both, you should download the .gz and recompress it to .bz2, not vice
versa.

-- 
Peter Samuelson | org-tld!p12n!peter | http://p12n.org/