Bug 744302

Summary: SHA256SUMS not supported in libzypp
Product: [openSUSE] openSUSE 12.2 Reporter: Bernhard Wiedemann <bwiedemann>
Component: libzypp Assignee: E-mail List <zypp-maintainers>
Status: RESOLVED FIXED QA Contact: E-mail List <qa-bugs>
Severity: Major    
Priority: P2 - High CC: adrian.schroeter, coolo
Version: Factory   
Target Milestone: ---   
Hardware: All   
OS: SUSE Other   
Whiteboard:
Found By: System Test Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---

Description Bernhard Wiedemann 2012-01-31 14:04:12 UTC 
recent openQA 12.2 Factory installs complain about unsigned 01_welcome.rtf file

http://openqa.opensuse.org/viewimg/opensuse/testresults/openSUSE-DVD-x86_64-Build0122-minimalx/start_install-2.png

There are a couple of SHA256SUMS* files in 
http://download.opensuse.org/factory/repo/oss/suse/setup/slide/txt/en/
but zypp only knows how to handle SHA1SUMS files.

we need to create SHA1SUMS files and/or update libzypp, to understand both.
Comment 1 Stephan Kulow 2012-01-31 17:21:08 UTC 
this is something adrian changed with security in mind. 

But at least http://doc.opensuse.org/projects/libzypp/12.1/classzypp_1_1CheckSum.html makes me believe, sha256 support is already in libzypp in general.
Comment 2 Michael Andres 2012-01-31 18:02:09 UTC 
(In reply to comment #1)
> makes me believe, sha256 support is already in libzypp in general.

Support for sha256 checksum format, yes. 
But he changed the name of the file to download (containing the checksums).
Comment 3 Michael Andres 2012-02-03 12:22:40 UTC 
We agreed on using CHECKSUMS for the new file which may contain any checksum type libzypp supports. If CHECKSUMS is not present we look for an old SHA1SUMS.

fixed in libzypp-11.1.0