search for: _binary_filedigest_algorithm

...>> haven't stumbled upon yet? >>>> >>>> SHA1 is broken. I shouldn't be using it. >>>> >>>> CentOS 7 is all I build packages for. >>>> >>> >>> In your .rpmmacros file .. try setting: >>> >>> _binary_filedigest_algorithm SHA256 >>> >>> or from the command line: >>> >>> rpm --define '_binary_filedigest_algorithm SHA256' <current_line> >>> >>> ===== >>> >>> if some some reason it does not like the SAH256 value .. try 8 instead. So:...

...there an up to date reference somewhere on RPM package signing that I >> haven't stumbled upon yet? >> >> SHA1 is broken. I shouldn't be using it. >> >> CentOS 7 is all I build packages for. >> > > In your .rpmmacros file .. try setting: > > _binary_filedigest_algorithm SHA256 > > or from the command line: > > rpm --define '_binary_filedigest_algorithm SHA256' <current_line> > > ===== > > if some some reason it does not like the SAH256 value .. try 8 instead. So: > > rpm --define '_binary_filedigest_algorithm 8...

...e on RPM package signing that I >>> haven't stumbled upon yet? >>> >>> SHA1 is broken. I shouldn't be using it. >>> >>> CentOS 7 is all I build packages for. >>> >> >> In your .rpmmacros file .. try setting: >> >> _binary_filedigest_algorithm SHA256 >> >> or from the command line: >> >> rpm --define '_binary_filedigest_algorithm SHA256' <current_line> >> >> ===== >> >> if some some reason it does not like the SAH256 value .. try 8 instead. So: >> >> rpm --define...

...et? >>>>> >>>>> SHA1 is broken. I shouldn't be using it. >>>>> >>>>> CentOS 7 is all I build packages for. >>>>> >>>> >>>> In your .rpmmacros file .. try setting: >>>> >>>> _binary_filedigest_algorithm SHA256 >>>> >>>> or from the command line: >>>> >>>> rpm --define '_binary_filedigest_algorithm SHA256' <current_line> >>>> >>>> ===== >>>> >>>> if some some reason it does not like the SAH...

hi, I noticed that RPM packages I sign use SHA1 Signature : RSA/SHA1, Fri 08 Jan 2016 10:50:58 AM PST, Key ID ad3b591d147abf59 Signatures from CentOS 7 use SHA256 Signature : RSA/SHA256, Wed 06 Jan 2016 08:54:58 AM PST, Key ID 24c6a8a7f4a80eb5 I'm trying to find where / how to use sha256 when I sign packages but I am not having much luck. Closest I have found is this :

...;>>>> SHA1 is broken. I shouldn't be using it. >>>>>> >>>>>> CentOS 7 is all I build packages for. >>>>>> >>>>> >>>>> In your .rpmmacros file .. try setting: >>>>> >>>>> _binary_filedigest_algorithm SHA256 >>>>> >>>>> or from the command line: >>>>> >>>>> rpm --define '_binary_filedigest_algorithm SHA256' <current_line> >>>>> >>>>> ===== >>>>> >>>>> if some some...

...> things change a lot. > > Is there an up to date reference somewhere on RPM package signing that I > haven't stumbled upon yet? > > SHA1 is broken. I shouldn't be using it. > > CentOS 7 is all I build packages for. > In your .rpmmacros file .. try setting: _binary_filedigest_algorithm SHA256 or from the command line: rpm --define '_binary_filedigest_algorithm SHA256' <current_line> ===== if some some reason it does not like the SAH256 value .. try 8 instead. So: rpm --define '_binary_filedigest_algorithm 8' or in .rpmmacros: _binary_filedigest_algor...

...gt;>>>>>> https://fedoraproject.org/wiki/RPM_file_format_changes_to_support_SHA-256 >>>>>>> This thread has been a whole bunch of confusion. What you're trying to do requires that you add one line to your .rpmmacros file: %_gpg_digest_algo sha256 The _binary_filedigest_algorithm and _source_filedigest_algorithm don't affect the signature, they affect the file digest. That is, they set the checksum by which files will be verified by rpm -V. You can see the digest of each file using "rpm -qp --dump". >> I'm still not getting it to work - I am try...

I have been following the MaximumRPM guide from here: http://www.rpm.org/max-rpm-snapshot/index.html and it seems a bit dated, but still very good (if fact the best all round documentation I have found so far) on using RPM package manager, and how to build rpm packages. The guide tells me to use the original paths, yet Centos wiki says otherwise. [rpmbuilder at karsites sox]$ rpm -iv