Re: announce-gen: Show an SHA256 sum that can be verified more easily

Bruno Haible via Gnulib discussion list writes: > OK, clearly there are different preferences. So, let me restore the > previous behaviour through a command-line option: --cksum-checksums. Thank you! I pushed the attached patch to make it possible to use it from cfg.mk like this: announce_gen_

Re: announce-gen: Show an SHA256 sum that can be verified more easily

On 02/12/2024 21:11, Jeffrey Walton wrote: It turns out that Base64 is malleable. All tools do not produce the same results. Also see . Whether Base64 malleability leads to a vulnerability is another question. This might be an issue for non canonicity, particu

Re: announce-gen: Show an SHA256 sum that can be verified more easily

On Sun, Dec 1, 2024 at 9:04 AM Simon Josefsson via Gnulib discussion list wrote: > > Bruno Haible via Gnulib discussion list writes: > > > The 'announce-gen' script shows SHA256 sums in a way that are hard to verify > > and understand for the users: > > - Verifying requires a special command th

Re: announce-gen: Show an SHA256 sum that can be verified more easily

Collin Funk wrote: > I've attached a patch, but I haven't pushed yet in case anyone > disagrees. Thanks for proposing that patch, Collin. Even though the patch does not find my agreement (and also lacks a modification in the --help output), it helped me save time, because Perl is unfamiliar to me.

Re: announce-gen: Show an SHA256 sum that can be verified more easily

+ * build-aux/announce-gen: Accept option --cksum-checksums. + (usage): Document option --cksum-checksums. + (print_checksums): Add prefer_cksum parameter. + 2024-12-01 Bruno Haible announce-gen: Show an SHA256 sum that can be verified more easily. diff --git a/build-aux/announce-gen b/build-

Re: announce-gen: Show an SHA256 sum that can be verified more easily

announce-gen: Add the --hex option. + * build-aux/announce-gen (print_checksums_hex): New function. + (print_checksums_base64): New function. + (print_checksums): Call the new functions. + 2024-12-01 Bruno Haible announce-gen: Show an SHA256 sum that can be verified more easily. diff --git a

Re: announce-gen: Show an SHA256 sum that can be verified more easily

On Sun, Dec 1, 2024 at 6:04 AM Simon Josefsson via Gnulib discussion list wrote: > Bruno Haible via Gnulib discussion list writes: > > > The 'announce-gen' script shows SHA256 sums in a way that are hard to verify > > and understand for the users: > > - Verifying requires a special command that

Re: announce-gen: Show an SHA256 sum that can be verified more easily

Bruno Haible via Gnulib discussion list writes: > The 'announce-gen' script shows SHA256 sums in a way that are hard to verify > and understand for the users: > - Verifying requires a special command that is not easy to remember. > - Verifying requires special tools that do not exist on all s

announce-gen: Show an SHA256 sum that can be verified more easily

omeone disagrees and wants the base64-wrapped thing back, I would propose to add a command-line option to 'announce-gen' for this purpose. [1] https://lists.gnu.org/archive/html/bug-gnulib/2023-02/msg00172.html 2024-12-01 Bruno Haible announce-gen: Show an SHA256 sum th