[Distutils] Migrating Hashes from MD5 to SHA256

[Donald Stufft]

On Jul 28, 2013, at 3:13 PM, Vinay Sajip <vinay_sajip at yahoo.co.uk> wrote:

>> From: Donald Stufft <donald at stufft.io>
> 
>> Yes they will change to have #sha256=…. instead of #md5=...
> [snip]
>> Here we are a little more flexible. I can leave the md5_digest key there and
>> simply add a sha256_digest key.
> [snip]
>> Again more flexible. I can simply add a show_sha256 action.
> [snip]
>> Typically it's left up to us. We often just work and deploy changes without
> [snip]
> 
> Thanks for the update, it'll help me to update distlib when the time comes.
> 
> Regards,
> 
> Vinay Sajip
> 



I sugggest distlib take the same approach as pip and setuptools. Allow any
#hashname=hash so that it will function with whatever hash people use.

-----------------
Donald Stufft
PGP: 0x6E3CBCE93372DCFA // 7C6B 7C5D 5E2B 6356 A926 F04F 6E3C BCE9 3372 DCFA

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://mail.python.org/pipermail/distutils-sig/attachments/20130728/0dc35afd/attachment.pgp>