On 24 Aug 2018, at 19:24, John Hardin wrote:
How far back does the SHA256 support go?
Not far:
$ svn log sa-update.raw |grep -A1 -B3 SHA256
------------------------------------------------------------------------
r1826916 | billcole | 2018-03-15 23:15:19 -0400 (Thu, 15 Mar 2018) | 1
line
added optional support for SHA256 in addition to or instead of SHA1
validation
------------------------------------------------------------------------
Would 3.3.x or 3.4.0 be broken by dropping the SHA1 sigs?
Yes. 3.4.1 as well.
