SP SRPM's

[Klingenstein, Nate]

> As a source package it really shouldn't matter, any differences should be cosmetic.

Cosmetic is as far as I got.  The hashes were different, so I stopped.  I don't even know if the URL is built into that, but I don't think it is.

http://download.opensuse.org/repositories/security://shibboleth/CentOS_7/src/shibboleth-2.6.0-2.1.src.rpm.mirrorlist
--> 73d8ca7d77ec413e804f35797836c394047127bad449a848527af44ca7a5e8c7

http://download.opensuse.org/repositories/security://shibboleth/CentOS_CentOS-6/src/shibboleth-2.6.0-2.1.src.rpm.mirrorlist
--> 3cb36ccdfe2c9002683313320f030819c4b3e54d10179d2e2aa1676f396a5ea8

> problem isn't the packaging, it's reliably managing dozens of builds

All I know is the big P Packaging, not the little p packaging.

RPM is available from third parties on the distribution I'm interested in for this project(Ubuntu 16.04) and so are old .deb packages(2.5.3 and apparently builds).