Issue #11197 has been updated by Ken Barber.

Project changed from Puppet Forge to Puppet


----------------------------------------
Bug #11197: PMT should use at least SHA2, and ideally to plan for multiple 
checksum types
https://projects.puppetlabs.com/issues/11197#change-64027

Author: Kelsey Hightower
Status: Needs More Information
Priority: Normal
Assignee: Kelsey Hightower
Category: 
Target version: 
Affected Puppet version: 
Keywords: 
Branch: 


Within the PMT codebase there are two types of hashing algorithms being used, 
MD5 for tracking files in module release archives, and SHA1 for tracking module 
downloads. During a recent code review, it was suggested that we use at least 
SHA2. 

There is a potential to cause incompatibilities if we change from MD5 to SHA2 
for tracking module files, as the newer versions of PMT Face would not be able 
to detect changes. This ticket is being opened to start the discussion on how 
best to approach this issue.


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en.

Reply via email to