Re: sa-update and signature verification

2018-10-02 Thread Kevin A. McGrail
Hi Daniele, You are correct.  3.4.2 does not support rule channels that only use SHA1. Please contact the other rule channels and tell them to add sha256.  We have moved away from SHA1.  It should be trivial on their end to generate a sha256sum. Regards, KAM On 10/2/2018 10:00 AM, Daniele Duca w

sa-update and signature verification

2018-10-02 Thread Daniele Duca
Hello, since updating to 3.4.2 I can't download rules from unofficial channels. The problem is that in version 3.4.1 sa-update checks the hash of the downloaded file using file.sha1 , while version 3.4.2 uses file.sha256 or file.sha512. See the relevant differences in the following sa-update