Ubuntu
npth package

  1. Bug #1536871
  2. Comment #9

Comment 9 for bug 1536871

Revision history for this message
Mario Limonciello (superm1) wrote :

Seth,

Thanks for raising that early concern. I don't believe there is currently any enforcement of sha256.
The LVFS metadata source that is configured by default (https://secure-lvfs.rhcloud.com/downloads/firmware.xml.gz) is also set to use sha1.

I'll talk to upstream about sorting out both enforcement of sha256 and changing the default metadata to sha256.

If you've got any other biggies, please let me know as they come up.