Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Stronger checksums #17315

Closed
AltGr opened this issue Sep 29, 2020 · 2 comments
Closed

Stronger checksums #17315

AltGr opened this issue Sep 29, 2020 · 2 comments

Comments

@AltGr
Copy link
Member

AltGr commented Sep 29, 2020

Modern opam supports md5, sha256 and sha512; but many packages here are still only relying on a md5.
We should move them to all have a sha512 (a bit long, but actually faster to compute than sha256 on modern archs).
We can keep the existing md5 and just add more hashes, so there should be absolutely no disruptions; (that should not, in particular, trigger recompilations, but we'd better double-check)

@avsm
Copy link
Member

avsm commented Sep 29, 2020

Happy to rewrite the opam-repository with this as a bulk change to get historical packages.

@github-actions
Copy link
Contributor

This issue has been open 90 days with no activity. Consequently, it is being marked with the "stale" label. What this means is that the issue will be automatically closed in 30 days unless more comments are added or the "stale" label is removed. If you come across this issue in the future, you may also find it helpful to visit our forum at https://discuss.ocaml.org where queries related to OCaml package management are very welcome.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants