On Wed, Feb 12, 2014 at 11:58:15AM +0100, Vít Ondruch wrote: > Dne 12.2.2014 09:46, Pierre-Yves Chibon napsal(a): > So Ralph and I wrote summershum, it's a simple database storing for each file in > each package: > - the packages name > - the filename > - the sha1sum of the file > - the tarball name > - the md5sum of the tarball > > I don't think we should use md5sum. It is disabled by default in recent > OpenSSL if I am not mistaken. That's what we use in the lookaside cache (the source file in your git), so in fact I just get this information from the fedmsg, but that's one reason why we use sha1sum for the files. Pierre _______________________________________________ infrastructure mailing list infrastructure@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/infrastructure