Now that it looks like SHA1 is getting closer to its end of life, add

the SHA512 digest to the mix of digests we keep for each distfile.

All part of providing stronger digests for pkgsrc, as discussed on
tech-pkg recently, with unanimous agreement.  There will be further
changes in this area in the near future, as we transit away from
reliance on SHA1 and RMD160.

New distinfo files will gain a SHA512 digest entry.  Existing
verification of distinfo files will just use the SHA1 and RMD160
digests which exist right now.
This commit is contained in:
agc 2015-10-12 18:23:48 +00:00
parent 98c93d3208
commit f8e65d3863

View file

@ -1,9 +1,9 @@
# $NetBSD: checksum.mk,v 1.20 2013/11/16 15:29:39 jakllsch Exp $
# $NetBSD: checksum.mk,v 1.21 2015/10/12 18:23:48 agc Exp $
#
# See bsd.checksum.mk for helpful comments.
#
_DIGEST_ALGORITHMS?= SHA1 RMD160
_DIGEST_ALGORITHMS?= SHA1 RMD160 SHA512
_PATCH_DIGEST_ALGORITHMS?= SHA1
# These variables are set by pkgsrc/mk/fetch/bsd.fetch-vars.mk.