[MacPorts] #63885: Replace rmd160 use in MacPorts with something else

[MacPorts]

#63885: Replace rmd160 use in MacPorts with something else
-------------------------+--------------------
  Reporter:  ryandesign  |      Owner:  (none)
      Type:  defect      |     Status:  new
  Priority:  Normal      |  Milestone:
 Component:  base        |    Version:
Resolution:              |   Keywords:
      Port:              |
-------------------------+--------------------

Comment (by ryandesign):

 Replying to [comment:17 neverpanic]:
 > the .rmd160 signatures we use for packages

 Any change to this will require changing how MacPorts base fetches and
 verifies archives, since it currently expects to be able to fetch a file
 whose name is the archive name with ".rmd160" appended (and for it to
 contain data in an rmd160-based format). This would be a good opportunity
 to implement a suggestion I mentioned previously, where instead of a
 ".rmd160" file, MacPorts fetches an information file, whose name could be
 the archive name minus the archive/compression format suffix plus a suffix
 like ".info.json" (e.g. "zlib-1.2.11_0.darwin_21.arm64.info.json"). This
 file would contain fields that specify the archive/compression suffix
 (e.g. "tbz2") and the signature and its format. This would give us the
 ability to modify, over time, on an archive by archive basis, what
 archive/compression and signature format we use.

-- 
Ticket URL: <https://trac.macports.org/ticket/63885#comment:18>
MacPorts <https://www.macports.org/>
Ports system for macOS