* uninnative and md5 checksum?
@ 2016-03-23 11:23 Holger Freyther
2016-03-29 22:05 ` Richard Purdie
0 siblings, 1 reply; 2+ messages in thread
From: Holger Freyther @ 2016-03-23 11:23 UTC (permalink / raw)
To: poky
Hi,
our jenkins started to fail with yocto-master and I started to take a look. I noticed that uninative binaries are being downloaded from the network. It is not great to download binaries from the network and execute but fair enough there is a checksum.
But the choice of md5 as checksum is a bit odd (md5 and sha1 are effectively broken), can this be moved to sha3 or sha256sum?
thank you
holger
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: uninnative and md5 checksum?
2016-03-23 11:23 uninnative and md5 checksum? Holger Freyther
@ 2016-03-29 22:05 ` Richard Purdie
0 siblings, 0 replies; 2+ messages in thread
From: Richard Purdie @ 2016-03-29 22:05 UTC (permalink / raw)
To: Holger Freyther, poky
On Wed, 2016-03-23 at 12:23 +0100, Holger Freyther wrote:
> Hi,
>
> our jenkins started to fail with yocto-master and I started to take a
> look. I noticed that uninative binaries are being downloaded from the
> network. It is not great to download binaries from the network and
> execute but fair enough there is a checksum.
>
> But the choice of md5 as checksum is a bit odd (md5 and sha1 are
> effectively broken), can this be moved to sha3 or sha256sum?
We use the fetcher's checksuming support so I guess sha256 would be the
better choice. It can be changed, at the expense of a bit of pain
making sure all the changes work smoothly.
Cheers,
Richard
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2016-03-29 22:05 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2016-03-23 11:23 uninnative and md5 checksum? Holger Freyther
2016-03-29 22:05 ` Richard Purdie
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.