[MacPorts] #63885: Replace rmd160 use in MacPorts with something else

MacPorts noreply at macports.org
Tue Nov 16 18:58:52 UTC 2021


#63885: Replace rmd160 use in MacPorts with something else
-------------------------+--------------------
  Reporter:  ryandesign  |      Owner:  (none)
      Type:  defect      |     Status:  new
  Priority:  Normal      |  Milestone:
 Component:  base        |    Version:
Resolution:              |   Keywords:
      Port:              |
-------------------------+--------------------

Comment (by neverpanic):

 The best alternative for the .rmd160 signatures we use for packages is
 probably signify(1).

 See https://www.openbsd.org/papers/bsdcan-signify.html and
 https://man.openbsd.org/signify.1.

 https://github.com/macports/macports-base/pull/184 would already add a
 copy of signify to MacPorts base. This PR doesn't change the archive
 signature mechanism to use signify, but it was my intention to eventually
 do this as well. When doing this, we should also switch from one globally
 configured key to a key per source, so that other sources can provide
 their own key with their own binaries.

-- 
Ticket URL: <https://trac.macports.org/ticket/63885#comment:17>
MacPorts <https://www.macports.org/>
Ports system for macOS


More information about the macports-tickets mailing list