|
|
Log in / Subscribe / Register

Removing SHA-1 for signatures in Fedora

Removing SHA-1 for signatures in Fedora

Posted Mar 16, 2022 3:08 UTC (Wed) by nevyn (guest, #33129)
In reply to: Removing SHA-1 for signatures in Fedora by khim
Parent article: Removing SHA-1 for signatures in Fedora

Fedora recompiles everything each release, so having a new symbol (and maybe new config. options) just to remove sha1 as a default allowed signature still affects all users using all Fedora binaries.

to post comments

Removing SHA-1 for signatures in Fedora

Posted Mar 16, 2022 11:30 UTC (Wed) by khim (subscriber, #9252) [Link]

That's self-inflicted wound: just create a separate shim libraries and use them to compile programs which misbehave with SHA1 disabled.

Third-party apps (which you couldn't test) wouldn't be affected. And you may even do what Android does: certain other, new, libraries would be incompatible with these shims. That way developers would be forced to stop using them if they want new features.


Copyright © 2026, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds