Please remove md5sum and sha1 from the archive metadata
Bug #1883271 reported by
Dimitri John Ledkov
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Launchpad itself |
Triaged
|
Low
|
Unassigned |
Bug Description
MD5Sum and SHA1 headers are still calculated and published in http://
these are no longer required, are weak, and bloat the metadata by a lot.
Please remove MD5Sum and SHA1 checksums from repository publishing.
Related branches
~xnox/launchpad:only-sha256
On hold
for merging
into
launchpad:master
- Steve Langasek (community): Abstain
- Andy Whitcroft: Pending requested
- Ubuntu Package Archive Administrators: Pending requested
- Canonical Security Team: Pending requested
- Julian Andres Klode: Pending requested
- Launchpad code reviewers: Pending requested
-
Diff: 526 lines (+52/-126)9 files modifiedlib/lp/archivepublisher/indices.py (+0/-10)
lib/lp/archivepublisher/model/ftparchive.py (+11/-1)
lib/lp/archivepublisher/publishing.py (+2/-26)
lib/lp/archivepublisher/tests/apt-data/Packages (+0/-3)
lib/lp/archivepublisher/tests/apt-data/Sources (+0/-10)
lib/lp/archivepublisher/tests/test_generate_contents_files.py (+1/-1)
lib/lp/archivepublisher/tests/test_indices.py (+2/-22)
lib/lp/archivepublisher/tests/test_publish_ftpmaster.py (+3/-2)
lib/lp/archivepublisher/tests/test_publisher.py (+33/-51)
tags: | added: md5sum |
information type: | Public → Public Security |
Changed in launchpad: | |
importance: | Undecided → High |
status: | New → Triaged |
tags: | added: id-5ef3b1a12290ae708350f26f |
Changed in launchpad: | |
importance: | High → Low |
To post a comment you must log in.
They can be safely removed in bionic and up.
d-i / anna, require MD5SUMs in xenial and down. And we still publish update to debian-installer/* suites.
Thus a blanket approach to remove MD5 & SHA1 can only be taken, once xenial goes end of basic support next year.