[rtmpdump] rtmpdump 2.4 source tar

Nigel Taylor njtaylor at asterisk.demon.co.uk
Sat Oct 8 02:52:53 CEST 2011

On 10/07/11 15:28, David Sainty wrote:
> Steven Penny <svnpenn at gmail.com> wrote:
>> On Fri, Oct 7, 2011 at 9:03 AM, David Sainty wrote:
>>> But I can't do a source-based package for other people to use out
>>> of git.
>> Wow, really?
>> 1. http://repo.or.cz/w/rtmpdump.git
>> 2. click tar.gz
>> examples!
>> http://repo.or.cz/w/rtmpdump.git/snapshot/60218d0af0f4bd683ecdebe49986f188820cf8ce.tar.gz
> Oh, I see what you're saying :)
> But it is still a bigger problem than it might appear. The dynamic
> tar files from git aren't always the same, which means the normal
> security hash checks on the tars fail.
> E.g. a sha1 of the resulting tar.gz file will produce a different
> result from day to day, or perhaps second to second. 
> _______________________________________________ rtmpdump mailing
> list rtmpdump at mplayerhq.hu 
> https://lists.mplayerhq.hu/mailman/listinfo/rtmpdump

Exactly. A source tar ball was created for building the OpenBSD rtmpdump
package and is held in the OpenBSD distfiles area.

This has been done for this and other git / svn sites that don't create
a source tar ball. A number of svn and git web sites may produce source
tar balls by some means, they are quite often different each time
downloaded and so fail the source checksums.

Here is the source tar ball used in creating the OpenBSD rtmpdump-2.4pl1

Debian (Ubuntu) done something similar here


and Gentoo


Nigel Taylor

More information about the rtmpdump mailing list