On 18/03/2020 08:20, Giovanni Bechis wrote:
On 3/17/20 1:39 PM, jean-frederic clere wrote:
Hi,
Are we planing to add sha512 in our release?
vcpkg (https://github.com/microsoft/vcpkg) for example uses sha512 to check the
files it downloads.
I think we should go that way even if it's not mandatory:
"For new releases, PMCs MUST supply SHA-256 and/or SHA-512"
(https://www.apache.org/dev/release-distribution#sigs-and-sums).
Giovanni
OK done in roll.sh.
+++
[jfclere@pc-7 TMP]$ more httpd-2.4.41/httpd-2.4.41.tar.bz2.sha512
57096e1c697efb9571b64ae0ccba9c785235f350d8ed3d0f851252fd20231644952aab31b8eb8ff66258a411fe309d63bd7c15fc66e7a9b9ba3442226894306e
*httpd-2.4.41.tar.bz2
[jfclere@pc-7 TMP]$ sha512sum httpd-2.4.41/httpd-2.4.41.tar.bz2
57096e1c697efb9571b64ae0ccba9c785235f350d8ed3d0f851252fd20231644952aab31b8eb8ff66258a411fe309d63bd7c15fc66e7a9b9ba3442226894306e
httpd-2.4.41/httpd-2.4.41.tar.bz2
+++
Will be used in 2.4.42 ;-)
--
Cheers
Jean-Frederic
