Request for help with port organisation: how to install several versions of data files

Mojca Miklavec mojca at
Tue Jul 2 09:21:13 PDT 2013

On Tue, Jul 2, 2013 at 1:08 PM, Ryan Schmidt wrote:
> The solution is for upstream to cease using md5 as their distfile integrity verification method and switch to an algorithm that does not have such vulnerabilities.

Citing Ben Morgan:

We will look at publishing these hashes for the source/data bundles on
the website, but cmake/Modules/Geant4DatasetDefinitions.cmake will
have to remain using MD5 for know because that is all CMake supports
in ExternalProject and file over the cmake version range we have to
support. We'll keep that under review though.

(It seems that only CMake 2.8.10 or 2.8.11 - not sure which one -
supports hashes other than MD5, see
And that version is relatively new.)


More information about the macports-dev mailing list