On Tue, 14 Feb 2023 17:41:16 +0100 ASSI wrote: > Takashi Yano via Cygwin-apps writes: > > Thanks for the advice. I have revised the cygport file. > > You are getting the file and the hash from the same unprotected source. > I was thinking you should put the hash into the cygport file and hence > the postinstall script. > > Also note that the system doing the postinstall will not necessarily > have internet access, so you'll need to cope with errors that will > produce. Thanks. The new cygport file attached downloads md5hash during the packaging process and embeds it into postinstall script. Does this make sense? -- Takashi Yano