[MacPorts] #37667: port lint should complain about using only md5 or sha1 checksums
#37667: port lint should complain about using only md5 or sha1 checksums --------------------------+-------------------------------- Reporter: ryandesign@… | Owner: macports-tickets@… Type: defect | Status: new Priority: Normal | Milestone: MacPorts Future Component: base | Version: Keywords: | Port: --------------------------+-------------------------------- `port lint` should issue a warning if any distfile or patchfile is listed with only an md5 or sha1 checksum, since md5 is a broken algorithm and sha1 is also kind of old by now. The warning message should encourage portfile authors to use both rmd160 and sha256 checksums on each file, like we show in the guide. -- Ticket URL: <https://trac.macports.org/ticket/37667> MacPorts <http://www.macports.org/> Ports system for Mac OS
#37667: port lint should complain about using only md5 or sha1 checksums ---------------------------+-------------------------------- Reporter: ryandesign@… | Owner: macports-tickets@… Type: enhancement | Status: new Priority: Normal | Milestone: MacPorts Future Component: base | Version: Resolution: | Keywords: Port: | ---------------------------+-------------------------------- Comment (by afb@…): There is no real reason to prefer rmd160 over sha1, though. Might as well use sha256 only, if updating them. -- Ticket URL: <https://trac.macports.org/ticket/37667#comment:2> MacPorts <http://www.macports.org/> Ports system for OS X
#37667: port lint should complain about using only md5 or sha1 checksums ---------------------------+-------------------------------- Reporter: ryandesign@… | Owner: macports-tickets@… Type: enhancement | Status: new Priority: Normal | Milestone: MacPorts Future Component: base | Version: Resolution: | Keywords: Port: | ---------------------------+-------------------------------- Comment (by ryandesign@…): We want to use at least two checksum types for each distfile, so that we never again have a problem if hash algorithm is later found to be deficient in some way. We have for some time already recommended the use of the rmd160 and sha256 pair. -- Ticket URL: <https://trac.macports.org/ticket/37667#comment:3> MacPorts <http://www.macports.org/> Ports system for OS X
participants (1)
-
MacPorts