incubator-ooo-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Pedro Giffuni <...@apache.org>
Subject Re: svn commit: r1377482 - /incubator/ooo/trunk/main/external_deps.lst
Date Sun, 26 Aug 2012 21:20:38 GMT
BTW,

----- Original Message -----
...
>> 
>>  This is already part of the current process. The signatures are in 
> download_external_dependencies.pl. The Central Maven Repository uses these as 
> well.
>> 
> 
> Those are MD5 hashes, not signatures.    MD5 has been broken since 1996:
> 
> http://en.wikipedia.org/wiki/MD5#Collision_vulnerabilities
> 

We can simply replace MD5 with SHA256 (Apache-Extras
generates SHA1).

Pedro.

Mime
View raw message