You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@deltaspike.apache.org by "Mark Struberg (Jira)" <ji...@apache.org> on 2021/03/10 15:32:00 UTC

[jira] [Resolved] (DELTASPIKE-1399) Md5 and SHA1 are deprecated

     [ https://issues.apache.org/jira/browse/DELTASPIKE-1399?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Mark Struberg resolved DELTASPIKE-1399.
---------------------------------------
    Resolution: Fixed

Hi Sebastian! we already use sha512 since quite some time. We do keep sha1 because some mechanism still support it for validation and cannot cope with sha512.

> Md5 and SHA1 are deprecated
> ---------------------------
>
>                 Key: DELTASPIKE-1399
>                 URL: https://issues.apache.org/jira/browse/DELTASPIKE-1399
>             Project: DeltaSpike
>          Issue Type: Bug
>      Security Level: public(Regular issues) 
>            Reporter: Sebb
>            Assignee: Mark Struberg
>            Priority: Major
>
> MD5 and SHA1 were deprecated as hash methods quite some time ago.
> They should no longer be used.
> Please update your releases to use SHA256 or SHA512 and remove/update any references to MD5 and SHA1 in download documentation.
> https://www.apache.org/dev/release-distribution#sigs-and-sums



--
This message was sent by Atlassian Jira
(v8.3.4#803005)