>Number:         7787
>Category:       pkg
>Synopsis:       "make fetch" should verify the file is correct (md5) after fetching
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    pkg-manager (NetBSD software packages system bug manager)
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Tue Jun 15 23:50:01 1999
>Last-Modified:
>Originator:     John Refling
>Organization:
>Release:        1.4 release
>Environment:
sparc


>Description:
In cases when one has limited internet access, it is nice to make a
script of packages you wish to fetch, all at once, then compile them
later.  When one uses a ftp_proxy server, it is possible for the
FTP to fail, but a file by the name of whatever-123.tar.gz appears in
the distfiles directory.  That file usually contains an html document
saying something on the order of ".... too many ftp users, etc, etc".

It is not until you get the entire mess home, off the internet, and
do a make, that you find out the the FTP, even though it apprears to
have retreived the file, did not retreive the correct contents.


>How-To-Repeat:


>Fix:
Need to ensure that the "fetched" files are indeed downloaded as
expected by verifying their MD5 checksums immediately after downloading.


>Audit-Trail:
>Unformatted: