diff options
| author | Michael Vogt <mvo@ubuntu.com> | 2015-09-01 11:13:48 +0200 |
|---|---|---|
| committer | Michael Vogt <mvo@ubuntu.com> | 2015-09-01 11:29:49 +0200 |
| commit | 55ae7a516126f9f064d8353bf962256b7307590a (patch) | |
| tree | 14c91251fa81c61c4ab26994036213b6ee24f61c /test/integration/test-ubuntu-bug-1098738-apt-get-source-md5sum | |
| parent | 226c0f64d46019d675840b16bd44ff985b45ad0f (diff) | |
Consider md5sum no longer a usable hash
The md5sum hash is broken since some time and we should no longer
consider it a usable hash. Also update the tests to reflect this.
Diffstat (limited to 'test/integration/test-ubuntu-bug-1098738-apt-get-source-md5sum')
| -rwxr-xr-x | test/integration/test-ubuntu-bug-1098738-apt-get-source-md5sum | 12 |
1 files changed, 8 insertions, 4 deletions
diff --git a/test/integration/test-ubuntu-bug-1098738-apt-get-source-md5sum b/test/integration/test-ubuntu-bug-1098738-apt-get-source-md5sum index 48a7f0562..26b1393b7 100755 --- a/test/integration/test-ubuntu-bug-1098738-apt-get-source-md5sum +++ b/test/integration/test-ubuntu-bug-1098738-apt-get-source-md5sum @@ -1,4 +1,8 @@ #!/bin/sh +# +# FIXME: this test is mostly meaningless now as we do not consider +# md5sum sufficient anyway. useful to test that it errors +# if not all hashes pass set -e TESTDIR=$(readlink -f $(dirname $0)) @@ -210,8 +214,8 @@ Download complete and in download only mode" aptget source --allow-unauthenticat testsuccess --nomsg test -e ${1}_1.0.dsc -a -e ${1}_1.0.tar.gz } -testok pkg-md5-ok -testkeep pkg-md5-ok +#testok pkg-md5-ok +#testkeep pkg-md5-ok testok pkg-sha256-ok testkeep pkg-sha256-ok @@ -223,7 +227,7 @@ testmismatch pkg-sha256-bad testok pkg-sha256-bad -o Acquire::ForceHash=MD5Sum # not having MD5 sum doesn't mean the file doesn't exist at all … -testok pkg-no-md5 +#testok pkg-no-md5 testok pkg-no-md5 -o Acquire::ForceHash=SHA256 testsuccessequal "Reading package lists... Building dependency tree... @@ -263,7 +267,7 @@ msgtest 'Only dsc file is downloaded as the tar has hashsum mismatch' 'pkg-mixed testsuccess --nomsg test -e pkg-mixed-sha2-bad_1.0.dsc -a ! -e pkg-mixed-sha2-bad_1.0.tar.gz # it gets even more pathologic: multiple entries for one file, some even disagreeing! -testok pkg-md5-agree +#testok pkg-md5-agree testfailureequal 'Reading package lists... Building dependency tree... E: Error parsing checksum in Files of source package pkg-md5-disagree' aptget source -d pkg-md5-disagree |