[PATCH] use SHA-2 hashes for releases

From: Andreas Stieger <astieger_at_suse.com>
Date: Sat, 10 Jun 2017 12:24:22 +0200

Hello,

Found this laying around... maybe someone who previously made releases
could check it out.

Obviously we could just as well use SHA-256. What do you think?

[[[

Use SHA-2 hashes for releases

* tools/dist/checksums.py: also check SHA-512 digest
* tools/dist/dist.sh: also generate SHA-512 digest
* tools/dist/download-release.sh: remove unused script
* tools/dist/release.py: switch to announcing SHA-512 digest
* tools/dist/templates/download.ezt,
  tools/dist/templates/rc-release-ann.ezt,
  tools/dist/templates/stable-release-ann.ezt: reference SHA-512 digests
  and HTTPS urls.

]]]

Andreas

-- 
Andreas Stieger <astieger_at_suse.com>
Project Manager Security
SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton,
HRB 21284 (AG Nürnberg)

text/x-patch attachment: sha2.patch

application/pgp-signature attachment: OpenPGP digital signature

Received on 2017-06-12 07:43:51 CEST

This message: [ Message body ]
Next message: Ryan Murray: "Subscribe"
Previous message: Branko Čibej: "Re: Windows - Can not commit if foldername contains invalid characters"
Next in thread: Daniel Shahaf: "Re: [PATCH] use SHA-2 hashes for releases"
Reply: Daniel Shahaf: "Re: [PATCH] use SHA-2 hashes for releases"

Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]