Re: [PATCH] use SHA-2 family hash for releases

Andreas Stieger wrote on Thu, Feb 23, 2017 at 21:08:43 +0100:
> +++ tools/dist/release.py (working copy)
> @@ -537,9 +537,9 @@ def roll_tarballs(args):
>
> shutil.move(filename, get_deploydir(args.base_dir))
> filename = os.path.join(get_deploydir(args.base_dir), filename)
> - m = hashlib.sha1()
> + m = hashlib.sha512()
> m.update(open(filename, 'r').read())
> - open(filename + '.sha1', 'w').write(m.hexdigest())
> + open(filename + '.sha512', 'w').write(m.hexdigest())

Should we keep generating both .sha1 and .sha512 for a transition
period?
Received on 2017-02-24 06:31:04 CET