[openssl-dev] Release Checksums

Dominyk Tiller dominyktiller at gmail.com
Thu Mar 19 15:07:53 UTC 2015


Hey guys,

Is there any chance OpenSSL can start issuing SHA256 checksums with
OpenSSL Releases as well as/instead of MD5/SHA1? MD5 isn't great these
days, to say the least, and SHA1 has some potential long-term issues.

Both MacPorts and Homebrew on OS X use SHA256 to verify downloads, and
not displaying the SHA256 upstream makes it harder for OS X
package-manager users to verify the checksum independently as desired.

Would be appreciated if possible,

Cheers,

Dom

-- 
Sent from OS X. If you wish to communicate more securely my PGP Public
Key is 0x872524db9d74326c.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: OpenPGP digital signature
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20150319/d48c39ee/attachment.sig>


More information about the openssl-dev mailing list