Re: Files with identical SHA1 breaks the repo

On 24.02.2017 11:51, Stefan Sperling wrote:
> On Thu, Feb 23, 2017 at 09:02:28PM +0100, Øyvind A. Holm wrote:
>> Earlier today, the first known SHA1 collision was presented:
>>
>> https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html
>> http://shattered.io/
>>
>> It turns out that adding these two PDF files to a svn repository makes
>> it impossible to checkout the repository properly if both files exist in
>> the repo. This script demonstrates what happens:
> As a workaround, disable rep-sharing and the error goes away.

This is precisely why rep-sharing is disabled by default when the
repository is created.

-- Brane
Received on 2017-02-24 12:18:11 CET