bazeldnf icon indicating copy to clipboard operation
bazeldnf copied to clipboard

Checksums are assumed to be in sha256 format

Open andreabolognani opened this issue 2 years ago • 2 comments

A colleague has reported hitting the following error:

INFO[0004] Resolving repomd.xml from http://<foo>/repodata/repomd.xml 
INFO[0004] Loading primary file from http://<foo>/repodata/<foo>-primary.xml.gz 
Error: failed to fetch primary.xml for <foo>: failed to get sha256sum of file: no sha256 found

On further inspection, this is caused by the fact that repomd.xml contains a bunch of

<checksum type='sha'>

elements, while bazeldnf expects all checksums to be in sha256 format.

Adding sha1 (and sha512?) support doesn't look too difficult from a quick look, but I can't allocate time to the task right now.

andreabolognani avatar Jan 13 '23 14:01 andreabolognani

I guess, we would have to download it then and create a sha256 value out of the file for inclusion.

rmohr avatar Jan 30 '23 18:01 rmohr

With https://github.com/rmohr/bazeldnf/pull/62 the way is open for sha512 via the integrity attribute. Sha1 is probably not something which we can have.

rmohr avatar Oct 06 '23 17:10 rmohr