[Buildroot] [PATCH 4/4] popt: add hash file

[Gustavo Zacarias]

On 07/07/15 11:27, Baruch Siach wrote:

> Is there a reason not to have both md5 (from LFS) and sha256 (locally
> calculated)?

Yes, very subjective though.
Right now we're fetching from a mirror and that's where the md5 comes from.
Proper upstream is back but never provided a md5 or sig for the latest 
releases, so that md5 isn't "original".
I based my calculation on a locally cached popt tarball that predates 
the source change BTW.
And to be honest hashes that aren't backed by announcements (archived on 
mailing lists that are on separate infra, hence harder to tamper with) 
are worth almost nothing.
Regards.