jmeter-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject [Bug 62821] New: Use SHA-512 checksums instead of MD5 to verify jar downloads
Date Fri, 12 Oct 2018 19:45:05 GMT
https://bz.apache.org/bugzilla/show_bug.cgi?id=62821

            Bug ID: 62821
           Summary: Use SHA-512 checksums instead of MD5 to verify jar
                    downloads
           Product: JMeter
           Version: 5.0
          Hardware: All
                OS: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Main
          Assignee: issues@jmeter.apache.org
          Reporter: felix.schumacher@internetallee.de
  Target Milestone: JMETER_5.1

MD5 is considered broken, so we should verify downloaded artefacts for our
build process with a non broken checksum. SHA-512 is considered safe -- at the
moment.

-- 
You are receiving this mail because:
You are the assignee for the bug.
Mime
View raw message