gnarlin / osget

Operating system image (.iso files usually) downloader which acts more like a package manager
GNU General Public License v3.0
41 stars 6 forks source link

Check hashes in order from stronger to weaker, drop support for SHA1 #2

Closed dsg22 closed 3 years ago

dsg22 commented 3 years ago

SHA1 is old and crufty, and should be retired. Remove support and drop SHA1SUM line from the only distro config file that contains one.

Also modify the order of hash comparisons to always check the strongest hash.