[MacPorts] #63885: Replace rmd160 use in MacPorts with something else
MacPorts
noreply at macports.org
Tue Nov 16 18:58:52 UTC 2021
#63885: Replace rmd160 use in MacPorts with something else
-------------------------+--------------------
Reporter: ryandesign | Owner: (none)
Type: defect | Status: new
Priority: Normal | Milestone:
Component: base | Version:
Resolution: | Keywords:
Port: |
-------------------------+--------------------
Comment (by neverpanic):
The best alternative for the .rmd160 signatures we use for packages is
probably signify(1).
See https://www.openbsd.org/papers/bsdcan-signify.html and
https://man.openbsd.org/signify.1.
https://github.com/macports/macports-base/pull/184 would already add a
copy of signify to MacPorts base. This PR doesn't change the archive
signature mechanism to use signify, but it was my intention to eventually
do this as well. When doing this, we should also switch from one globally
configured key to a key per source, so that other sources can provide
their own key with their own binaries.
--
Ticket URL: <https://trac.macports.org/ticket/63885#comment:17>
MacPorts <https://www.macports.org/>
Ports system for macOS
More information about the macports-tickets
mailing list