I do see your point, and bug reports have been filed to the right 
instance in this case (Gentoo bugzilla).
   www.povray.org is used as a 'last resort' for the scripts that 
fetches the files. But - the mirrors are always supposed to be current 
and they do carry the 'right' release for which the scripts are built. 
Problems arise when the downloading fails from the mirrors and 
www.povray.org gets used instead. (See 
http://bugs.gentoo.org/show_bug.cgi?id=18206 ). Since the name of the 
source file is still the same, it gets downloaded but fails the 
verification check.
   It just seems that it would be a fairly easy thing provide an aliased 
name of the tarball, which would make it more convenient to track 
updates and keep both people and automated scripts happy.
   I'll suggest to the Gentoo people that they change the name of the 
source file to an unambiguos 'povray-3.50c.tar.gz', but I think it would 
be a nice service from the POV team to do this as well. :-)



Thorsten Froehlich wrote:

> <fei### [at] feinorghhomelinuxorg>  wrote:
> 
> 
>>But when you depend on md5sums and other means of verification of
>>downloaded files it just breaks things whenever _anything_, even a
>>single byte, with the source files change.
> 
> 
> Well, that is to be expected if the archive changes, isn't it?  So you get
> the new archive and use it.  If somebody else creates an md5 of some old
> archive, well, that is _their_ problem, so complaining to them is the
> appropriate thing to do.  If they want to make POV-Ray available this way
> they can just mirror the archive they used; which is nicer anyway as it
> reduces povray.org server traffic.
> 
>     Thorsten
> 
> ____________________________________________________
> Thorsten Froehlich, Duisburg, Germany
> e-mail: tho### [at] trfde
> 
> Visit POV-Ray on the web: http://mac.povray.org

Post a reply to this message