On 11 Aug, Kay sch...@apache.org wrote: > > > On 08/11/2016 12:50 PM, Kay sch...@apache.org wrote: >> >> >> On 08/09/2016 02:12 PM, Kay Schenk wrote: >>> [top posting] >>> I'm in the process of trying to "sync" instructions for Linux32, >>> Linux64, and MacOSX at the moment. As far as instructions on the >>> actual HOTFIX page, we need to have just a "general" instruction for >>> ALL zips that simply says -- "Unzip this package to some folder of >>> your choosing and read the README that's included." Everything else >>> should be in the various READMEs for each platform. >>> >>> I should be done with all edits by this evening for a final review >>> before zipping and signing. >> >> Ok, I've now moved on to creating zip files, etc for Linux32, Linux64 >> and Mac. >> >> My openssl version on does NOT supply digest sha256. Is it OK to use >> sha1? MD5 already computed for each of these. > > sha1 is referenced on the ASF code signing page so I decided it was OK. :)
I'm really surprised that ASF requires MD5 since it was broken long ago. Even SHA1 is now regarded as a weak hash. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
