diff options
| author | Panu Matilainen <pmatilai@redhat.com> | 2017-03-08 14:51:45 +0200 |
|---|---|---|
| committer | Panu Matilainen <pmatilai@redhat.com> | 2017-03-08 14:51:45 +0200 |
| commit | 0cd74ade37d16d282d13e781deb68a219b2c04b9 (patch) | |
| tree | 54e55288889abae1a4020758587c94c152e18ce3 | |
| parent | 6eeb2f2963cb4ab5f7c24b0c7165336581e53117 (diff) | |
| download | rpm-0cd74ade37d16d282d13e781deb68a219b2c04b9.tar.gz | |
Bump file digests to SHA256 by default, finally
As a part of modernizing the crypto used by rpm, it's way past time
to use a stronger algorithm for the file digests. The jump from MD5
is not entirely smooth but at least Fedora and RHEL did that ages ago
and survived, others should too. And of course you can always flip
it back to MD5 if you really need to, for eg building packages for
ancient distro versions.
| -rw-r--r-- | macros.in | 10 |
1 files changed, 5 insertions, 5 deletions
@@ -355,17 +355,17 @@ package or when debugging this package.\ # Algorithm to use for generating file checksum digests on build. # If not specified or 0, MD5 is used. -# WARNING: non-MD5 is backwards incompatible, don't enable lightly! -# The supported algorithms may depend on NSS version, as of NSS -# 3.11.99.5 the following are supported: +# WARNING: non-MD5 is backwards incompatible with rpm < 4.6! +# The supported algorithms may depend on the underlying crypto +# implementation but generally at least the following are supported: # 1 MD5 (default) # 2 SHA1 # 8 SHA256 # 9 SHA384 # 10 SHA512 # -#%_source_filedigest_algorithm 1 -#%_binary_filedigest_algorithm 1 +%_source_filedigest_algorithm 8 +%_binary_filedigest_algorithm 8 # Configurable vendor information, same as Vendor: in a specfile. # |