| Message ID | 1464959760-65290-1-git-send-email-clayton.shotwell@rockwellcollins.com |
|---|---|
| State | Rejected |
| Headers | show |
Hello, On Fri, 3 Jun 2016 08:16:00 -0500, Clayton Shotwell wrote: > The hash published in the make release emails is a md5sum, not a > sha1sum. Locally verified the downloaded file checks against the md5sum > after verifying the signature > > Signed-off-by: Clayton Shotwell <clayton.shotwell@rockwellcollins.com> > --- > package/make/make.hash | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) Thanks, but this issue has already been fixed in https://git.buildroot.net/buildroot/commit/?id=3aa3b892aba1169618075c9d55af3d57ad59092b. Thanks! Thomas
Thomas, On Fri, Jun 3, 2016 at 8:19 AM, Thomas Petazzoni <thomas.petazzoni@free-electrons.com> wrote: > Hello, > > On Fri, 3 Jun 2016 08:16:00 -0500, Clayton Shotwell wrote: >> The hash published in the make release emails is a md5sum, not a >> sha1sum. Locally verified the downloaded file checks against the md5sum >> after verifying the signature >> >> Signed-off-by: Clayton Shotwell <clayton.shotwell@rockwellcollins.com> >> --- >> package/make/make.hash | 2 +- >> 1 file changed, 1 insertion(+), 1 deletion(-) > > Thanks, but this issue has already been fixed in > https://git.buildroot.net/buildroot/commit/?id=3aa3b892aba1169618075c9d55af3d57ad59092b. My apologies. That's what I get for looking at my build results from last night and not pulling down the latest first. Thanks, Clayton
diff --git a/package/make/make.hash b/package/make/make.hash index 528822f..81f7044 100644 --- a/package/make/make.hash +++ b/package/make/make.hash @@ -1,4 +1,4 @@ # From http://lists.gnu.org/archive/html/info-gnu/2016-05/msg00013.html -sha1 85ad14d08766201ffe71efa866f4fb91 make-4.2.tar.bz2 +md5 85ad14d08766201ffe71efa866f4fb91 make-4.2.tar.bz2 # Locally calculated after checking signature sha256 4e5ce3b62fe5d75ff8db92b7f6df91e476d10c3aceebf1639796dc5bfece655f make-4.2.tar.bz2
The hash published in the make release emails is a md5sum, not a sha1sum. Locally verified the downloaded file checks against the md5sum after verifying the signature Signed-off-by: Clayton Shotwell <clayton.shotwell@rockwellcollins.com> --- package/make/make.hash | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)