Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update makedist.sh #173

Merged
merged 1 commit into from Feb 28, 2020
Merged

Update makedist.sh #173

merged 1 commit into from Feb 28, 2020

Conversation

noloader
Copy link
Contributor

@noloader noloader commented Feb 28, 2020

Use the latest config.guess and config.sub
Use SHA-256 for release signing

The last time I checked GPG - which was several years ago - GPG used SHA-1 as the default digest algorithm. I got into the habit of using --digest-algo SHA256 to explicitly avoid SHA-1 in anticipation of Announcing the first SHA1 collision . (It was apparent the SHA-1 collision was coming based on Marc Stevens' work on hashclash).

Use the latest config.guess and config.sub
Use SHA-256 for release signing
@wcawijngaards wcawijngaards self-assigned this Feb 28, 2020
@wcawijngaards wcawijngaards merged commit 6e54225 into NLnetLabs:master Feb 28, 2020
1 check passed
wcawijngaards added a commit that referenced this pull request Feb 28, 2020
- Merge PR #173: updated makedist.sh for config.guess and
  config.sub and sha256 digest for gpg, by noloader.
@wcawijngaards
Copy link
Member

wcawijngaards commented Feb 28, 2020

Thanks for the contribution. Merged it.

@noloader noloader deleted the makedist branch Feb 28, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants