]> git.ipfire.org Git - ipfire-2.x.git/commit - lfs/perl-Net-IP
Switch checksums from MD5 to BLAKE2
authorPeter Müller <peter.mueller@ipfire.org>
Wed, 23 Mar 2022 11:12:31 +0000 (11:12 +0000)
committerPeter Müller <peter.mueller@ipfire.org>
Sat, 2 Apr 2022 14:19:25 +0000 (14:19 +0000)
commit9a7e4d85069b6475d231e4fdfbd26d93557d3f10
tree43d2b37814309bb8fd4584cc0a49eefeef4635de
parentd95b4c94db3691840dba3fab736c2d8a8f8633c8
Switch checksums from MD5 to BLAKE2

Historically, the MD5 checksums in our LFS files serve as a protection
against broken downloads, or accidentally corrupted source files.

While the sources are nowadays downloaded via HTTPS, it make sense to
beef up integrity protection for them, since transparently intercepting
TLS is believed to be feasible for more powerful actors, and the state
of the public PKI ecosystem is clearly not helping.

Therefore, this patch switches from MD5 to BLAKE2, updating all LFS
files as well as make.sh to deal with this checksum algorithm. BLAKE2 is
notably faster (and more secure) than SHA2, so the performance penalty
introduced by this patch is negligible, if noticeable at all.

In preparation of this patch, the toolchain files currently used have
been supplied with BLAKE2 checksums as well on
https://source.ipfire.org/.

Cc: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremeripfire.org>
651 files changed:
lfs/7zip
lfs/Config
lfs/acl
lfs/acpid
lfs/alac
lfs/alsa
lfs/amazon-ssm-agent
lfs/apache2
lfs/apcupsd
lfs/apr
lfs/aprutil
lfs/arping
lfs/attr
lfs/autoconf
lfs/automake
lfs/avahi
lfs/aws-cli
lfs/backup
lfs/bacula
lfs/bash
lfs/bc
lfs/beep
lfs/berkeley
lfs/bind
lfs/binutils
lfs/bird
lfs/bison
lfs/boost
lfs/bootstrap
lfs/borgbackup
lfs/br2684ctl
lfs/bridge-utils
lfs/bwm-ng
lfs/bzip2
lfs/c-ares
lfs/ca-certificates
lfs/cairo
lfs/calamaris
lfs/ccache
lfs/cdrkit
lfs/cdrom
lfs/chkconfig
lfs/cifs-utils
lfs/clamav
lfs/cleanup-toolchain
lfs/cmake
lfs/collectd
lfs/colm
lfs/configroot
lfs/conntrack-tools
lfs/core-updates
lfs/coreutils
lfs/cpio
lfs/cpufrequtils
lfs/cups
lfs/cups-filters
lfs/curl
lfs/cyrus-sasl
lfs/dbus
lfs/ddns
lfs/ddrescue
lfs/dehydrated
lfs/dejagnu
lfs/dejavu-fonts-ttf
lfs/dhcp
lfs/dhcpcd
lfs/diffutils
lfs/dma
lfs/dmidecode
lfs/dnsdist
lfs/dosfstools
lfs/dracut
lfs/dtc
lfs/dvb-firmwares
lfs/e2fsprogs
lfs/ebtables
lfs/ed
lfs/efibootmgr
lfs/efivar
lfs/elfutils
lfs/elinks
lfs/epson-inkjet-printer-escpr
lfs/etherwake
lfs/ethtool
lfs/exfatprogs
lfs/expat
lfs/expect
lfs/faad2
lfs/fake-environ
lfs/fcron
lfs/fetchmail
lfs/ffmpeg
lfs/file
lfs/findutils
lfs/fireinfo
lfs/fireperf
lfs/firmware-update
lfs/flac
lfs/flag-icons
lfs/flash-images
lfs/flashrom
lfs/flex
lfs/fontconfig
lfs/foomatic
lfs/fping
lfs/freefont
lfs/freeradius
lfs/freetype
lfs/fribidi
lfs/frr
lfs/fuse
lfs/gawk
lfs/gcc
lfs/gd
lfs/gdb
lfs/gdbm
lfs/gettext
lfs/ghostscript
lfs/git
lfs/glib
lfs/glibc
lfs/gmp
lfs/gnu-netcat
lfs/gnump3d
lfs/gnupg
lfs/gnutls
lfs/go
lfs/gperf
lfs/gptfdisk
lfs/grep
lfs/groff
lfs/grub
lfs/guardian
lfs/gutenprint
lfs/gzip
lfs/haproxy
lfs/harfbuzz
lfs/hdparm
lfs/hostapd
lfs/hostname
lfs/hplip
lfs/htop
lfs/hwdata
lfs/hyperscan
lfs/i2c-tools
lfs/iana-etc
lfs/icinga
lfs/ids-ruleset-sources
lfs/iftop
lfs/igmpproxy
lfs/initscripts
lfs/installer
lfs/intel-microcode
lfs/intltool
lfs/iotop
lfs/iperf
lfs/iperf3
lfs/ipfire-netboot
lfs/iproute2
lfs/ipset
lfs/iptables
lfs/iptraf-ng
lfs/iputils
lfs/ipvsadm
lfs/iw
lfs/jansson
lfs/joe
lfs/jq
lfs/jquery
lfs/json-c
lfs/kbd
lfs/keepalived
lfs/keyutils
lfs/kmod
lfs/knot
lfs/krb5
lfs/l7-protocols
lfs/lame
lfs/lcdproc
lfs/lcms2
lfs/less
lfs/libaio
lfs/libarchive
lfs/libart
lfs/libassuan
lfs/libcap
lfs/libcap-ng
lfs/libcdada
lfs/libconfig
lfs/libdaemon
lfs/libdnet
lfs/libedit
lfs/libevent
lfs/libevent2
lfs/libexif
lfs/libffi
lfs/libgcrypt
lfs/libgpg-error
lfs/libhtp
lfs/libid3tag
lfs/libidn
lfs/libinih
lfs/libjpeg
lfs/libloc
lfs/libmad
lfs/libmnl
lfs/libmpc
lfs/libmpdclient
lfs/libmpeg2
lfs/libnet
lfs/libnetfilter_conntrack
lfs/libnetfilter_cthelper
lfs/libnetfilter_cttimeout
lfs/libnetfilter_queue
lfs/libnfnetlink
lfs/libnl
lfs/libnl-3
lfs/libogg
lfs/liboping
lfs/libpcap
lfs/libpciaccess
lfs/libpng
lfs/libpri
lfs/libseccomp
lfs/libshout
lfs/libsmooth
lfs/libsolv
lfs/libssh
lfs/libstatgrab
lfs/libtalloc
lfs/libtasn1
lfs/libtiff
lfs/libtirpc
lfs/libtool
lfs/liburcu
lfs/libusb
lfs/libusb-compat
lfs/libusbredir
lfs/libuv
lfs/libvirt
lfs/libvorbis
lfs/libxcrypt
lfs/libxml2
lfs/libxslt
lfs/libyajl
lfs/libyang
lfs/linux
lfs/linux-atm
lfs/linux-firmware
lfs/linux-initrd
lfs/lm_sensors
lfs/lmdb
lfs/logrotate
lfs/logwatch
lfs/lshw
lfs/lsof
lfs/ltrace
lfs/lua
lfs/lvm2
lfs/lynis
lfs/lz4
lfs/lzip
lfs/lzo
lfs/m4
lfs/make
lfs/man
lfs/man-pages
lfs/mc
lfs/mcelog
lfs/mdadm
lfs/mdns-repeater
lfs/memtest
lfs/meson
lfs/minicom
lfs/minidlna
lfs/misc-progs
lfs/monit
lfs/mpage
lfs/mpc
lfs/mpd
lfs/mpfire
lfs/mpfr
lfs/mtr
lfs/multipath-tools
lfs/nagios-plugins
lfs/nagios_nrpe
lfs/nano
lfs/nasm
lfs/ncat
lfs/ncdu
lfs/ncurses
lfs/ncurses-compat
lfs/net-tools
lfs/netatalk
lfs/netpbm
lfs/netsnmpd
lfs/nettle
lfs/newt
lfs/nfs
lfs/nginx
lfs/ninja
lfs/nmap
lfs/nss-myhostname
lfs/ntfs-3g
lfs/ntp
lfs/nut
lfs/observium-agent
lfs/oci-cli
lfs/oci-python-sdk
lfs/oinkmaster
lfs/openjpeg
lfs/openldap
lfs/openssh
lfs/openssl
lfs/openvmtools
lfs/openvpn
lfs/opus
lfs/p11-kit
lfs/pakfire
lfs/pam
lfs/pango
lfs/parted
lfs/patch
lfs/pcengines-apu-firmware
lfs/pciutils
lfs/pcmciautils
lfs/pcre
lfs/pcre2
lfs/perl
lfs/perl-Apache-Htpasswd
lfs/perl-Archive-Tar
lfs/perl-Archive-Zip
lfs/perl-Authen-SASL
lfs/perl-BerkeleyDB
lfs/perl-CGI
lfs/perl-Canary-Stability
lfs/perl-Carp-Clan
lfs/perl-Compress-Zlib
lfs/perl-Convert-TNEF
lfs/perl-Convert-UUlib
lfs/perl-Crypt-PasswdMD5
lfs/perl-DBD-SQLite
lfs/perl-DBI
lfs/perl-Data-UUID
lfs/perl-Date-Calc
lfs/perl-Date-Manip
lfs/perl-Device-Modem
lfs/perl-Device-SerialPort
lfs/perl-Digest
lfs/perl-Digest-HMAC
lfs/perl-Digest-SHA1
lfs/perl-Email-Date-Format
lfs/perl-ExtUtils-PkgConfig
lfs/perl-File-ReadBackwards
lfs/perl-File-Tail
lfs/perl-Font-TTF
lfs/perl-GD
lfs/perl-GD-Graph
lfs/perl-GD-TextUtil
lfs/perl-HTML-Parser
lfs/perl-HTML-Tagset
lfs/perl-HTML-Template
lfs/perl-HTTP-Date
lfs/perl-HTTP-Message
lfs/perl-IO-Socket-SSL
lfs/perl-IO-String
lfs/perl-IO-Stringy
lfs/perl-LWP-Protocol-https
lfs/perl-MIME-Base64
lfs/perl-MIME-Lite
lfs/perl-MIME-Tools
lfs/perl-Mail-Tools
lfs/perl-Net-CIDR-Lite
lfs/perl-Net-DNS
lfs/perl-Net-HTTP
lfs/perl-Net-IP
lfs/perl-Net-IPv4Addr
lfs/perl-Net-SMTP-SSL
lfs/perl-Net-Server
lfs/perl-Net-Telnet
lfs/perl-NetAddr-IP
lfs/perl-Net_SSLeay
lfs/perl-PDF-API2
lfs/perl-Parse-Yapp
lfs/perl-Sort-Naturally
lfs/perl-Switch
lfs/perl-Text-CSV_XS
lfs/perl-Text-Tabs+Wrap
lfs/perl-TimeDate
lfs/perl-Try-Tiny
lfs/perl-URI
lfs/perl-Unix-Syslog
lfs/perl-XML-Parser
lfs/perl-common-sense
lfs/perl-gettext
lfs/perl-inotify2
lfs/perl-libwww
lfs/pigz
lfs/pixman
lfs/pkg-config
lfs/pmacct
lfs/poppler
lfs/poppler-data
lfs/popt
lfs/postfix
lfs/powertop
lfs/ppp
lfs/pptp
lfs/procps
lfs/proxy-accounting
lfs/psmisc
lfs/python3
lfs/python3-arrow
lfs/python3-botocore
lfs/python3-build
lfs/python3-certifi
lfs/python3-cffi
lfs/python3-charset-normalizer
lfs/python3-circuitbreaker
lfs/python3-click
lfs/python3-colorama
lfs/python3-cryptography
lfs/python3-daemon
lfs/python3-dateutil
lfs/python3-docutils
lfs/python3-flit
lfs/python3-idna
lfs/python3-inotify
lfs/python3-install
lfs/python3-jmespath
lfs/python3-packaging
lfs/python3-pep517
lfs/python3-pyasn1
lfs/python3-pycparser
lfs/python3-pyparsing
lfs/python3-pyproject2setuppy
lfs/python3-pytz
lfs/python3-requests
lfs/python3-rsa
lfs/python3-s3transfer
lfs/python3-semantic-version
lfs/python3-setuptools
lfs/python3-setuptools-rust
lfs/python3-setuptools-scm
lfs/python3-six
lfs/python3-terminaltables
lfs/python3-toml
lfs/python3-tomli
lfs/python3-typing-extensions
lfs/python3-urllib3
lfs/python3-yaml
lfs/qemu
lfs/qemu-ga
lfs/qpdf
lfs/ragel
lfs/readline
lfs/reiserfsprogs
lfs/rng-tools
lfs/rpcbind
lfs/rpcsvc-proto
lfs/rpi-firmware
lfs/rrdtool
lfs/rsync
lfs/rtl8189es
lfs/rtl8189fs
lfs/rtl8812au
lfs/rtl8822bu
lfs/rust
lfs/rust-aho-corasick
lfs/rust-autocfg
lfs/rust-block-buffer
lfs/rust-cfg-if
lfs/rust-cipher
lfs/rust-crossbeam-channel
lfs/rust-crossbeam-deque
lfs/rust-crossbeam-epoch
lfs/rust-crossbeam-utils
lfs/rust-crypto-common
lfs/rust-ctor
lfs/rust-digest
lfs/rust-dirs
lfs/rust-dissimilar
lfs/rust-either
lfs/rust-generic-array
lfs/rust-getrandom
lfs/rust-ghost
lfs/rust-glob
lfs/rust-hex
lfs/rust-home
lfs/rust-indoc
lfs/rust-indoc-impl
lfs/rust-instant
lfs/rust-inventory
lfs/rust-inventory-impl
lfs/rust-itoa
lfs/rust-lazy-static
lfs/rust-libc
lfs/rust-lock_api
lfs/rust-log
lfs/rust-memchr
lfs/rust-memoffset
lfs/rust-num_cpus
lfs/rust-once_cell
lfs/rust-parking_lot
lfs/rust-parking_lot_core
lfs/rust-paste
lfs/rust-paste-impl
lfs/rust-pest
lfs/rust-ppv-lite86
lfs/rust-proc-macro-hack
lfs/rust-proc-macro2
lfs/rust-pyo3
lfs/rust-pyo3-build-config
lfs/rust-pyo3-macros
lfs/rust-pyo3-macros-backend
lfs/rust-quote
lfs/rust-rand
lfs/rust-rand-0.4
lfs/rust-rand_chacha
lfs/rust-rand_core
lfs/rust-rand_core-0.3.1
lfs/rust-rand_core-0.4.2
lfs/rust-rand_hc
lfs/rust-rayon
lfs/rust-rayon-core
lfs/rust-rdrand
lfs/rust-regex
lfs/rust-regex-syntax
lfs/rust-remove_dir_all
lfs/rust-ryu
lfs/rust-same-file
lfs/rust-scopeguard
lfs/rust-semver
lfs/rust-semver-parser
lfs/rust-serde
lfs/rust-serde_derive
lfs/rust-serde_json
lfs/rust-smallvec
lfs/rust-syn
lfs/rust-synstructure
lfs/rust-tempdir
lfs/rust-termcolor
lfs/rust-toml
lfs/rust-toolchain_find
lfs/rust-trybuild
lfs/rust-typenum
lfs/rust-ucd-trie
lfs/rust-unicode-xid
lfs/rust-unindent
lfs/rust-version-check
lfs/rust-walkdir
lfs/samba
lfs/sarg
lfs/screen
lfs/sdl2
lfs/sdparm
lfs/sed
lfs/setup
lfs/shadow
lfs/shairport-sync
lfs/slang
lfs/smartmontools
lfs/socat
lfs/sox
lfs/soxr
lfs/spandsp
lfs/spectre-meltdown-checker
lfs/speedtest-cli
lfs/spice
lfs/spice-protocol
lfs/sqlite
lfs/squid
lfs/squid-asnbl
lfs/squidclamav
lfs/squidguard
lfs/sshfs
lfs/sslh
lfs/stage1
lfs/stage2
lfs/strace
lfs/stress
lfs/strip
lfs/strongswan
lfs/stunnel
lfs/sudo
lfs/suricata
lfs/swatch
lfs/swig
lfs/sysbench
lfs/sysfsutils
lfs/sysklogd
lfs/syslinux
lfs/sysstat
lfs/sysvinit
lfs/taglib
lfs/tar
lfs/tcl
lfs/tcpdump
lfs/telnet
lfs/texinfo
lfs/tftpd
lfs/tmux
lfs/tor
lfs/traceroute
lfs/transmission
lfs/tshark
lfs/tzdata
lfs/u-boot
lfs/u-boot-friendlyarm
lfs/ubuntu-font-family
lfs/udev
lfs/unbound
lfs/unzip
lfs/usb_modeswitch
lfs/usb_modeswitch_data
lfs/usbutils
lfs/util-linux
lfs/vdr
lfs/vdr_dvbapi
lfs/vdr_eepg
lfs/vdr_epgsearch
lfs/vdr_streamdev
lfs/vdradmin
lfs/vim
lfs/vlan
lfs/vnstat
lfs/w_scan
lfs/watchdog
lfs/wavemon
lfs/web-user-interface
lfs/wget
lfs/whatmask
lfs/which
lfs/whois
lfs/wio
lfs/wireless
lfs/wireless-regdb
lfs/wpa_supplicant
lfs/xfsprogs
lfs/xinetd
lfs/xr819-firmware
lfs/xradio
lfs/xvid
lfs/xz
lfs/yaml
lfs/zabbix_agentd
lfs/zd1211-firmware
lfs/zerofree
lfs/zlib
lfs/zstd
make.sh