sha256sum need by icedtea6

Andrew John Hughes ahughes at redhat.com
Wed Jul 14 08:46:08 PDT 2010


On 14 July 2010 16:14, Lussier, Denis <denisl at openscg.com> wrote:
> I am trying to build icedtea6-1.8 on CentOS 4 so that the resulting binaries
> will be portable across most 2.6 Linux flavors.   (Note that I am already
> doing this for basic OpenJDK 6 builds as per availability
> http://www.OpenSCG.org )
> Seems like sha256sum is part of coreutils for RHEL 5 and beyond.  Can anyone
> offer advice on an RPM to install or a source build?
>
>

Sigh, when I used sha256sum I checked when it was added to coreutils
and didn't think anyone would use a version that old (2005 or 2006
IIRC)... Most package checks use something other than md5 now because
it's been found vulnerable (http://en.wikipedia.org/wiki/MD5#Security)

It's only used during the build to check the downloaded packages so
you could replace it with md5sum (which is still used for some
packages in IcedTea6 anyway) and appropriate checksums, or build a
local copy of a newer coreutils.  It's not a runtime dependency.
-- 
Andrew :-)

Free Java Software Engineer
Red Hat, Inc. (http://www.redhat.com)

Support Free Java!
Contribute to GNU Classpath and the OpenJDK
http://www.gnu.org/software/classpath
http://openjdk.java.net

PGP Key: 94EFD9D8 (http://subkeys.pgp.net)
Fingerprint: F8EF F1EA 401E 2E60 15FA  7927 142C 2591 94EF D9D8



More information about the distro-pkg-dev mailing list