From e58735a762713402d6b7cbd7d5a315aa4f5556a8 Mon Sep 17 00:00:00 2001 From: Xu Cheng Date: Tue, 7 Apr 2015 22:01:59 +0800 Subject: stop supporting md5 checksum This prevents a downgrade attack. Closes #38433. Signed-off-by: Xu Cheng --- Library/Homebrew/compat/md5.rb | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) (limited to 'Library') diff --git a/Library/Homebrew/compat/md5.rb b/Library/Homebrew/compat/md5.rb index eb8eb0232..6c49f5fe2 100644 --- a/Library/Homebrew/compat/md5.rb +++ b/Library/Homebrew/compat/md5.rb @@ -18,11 +18,9 @@ end class Pathname def md5 - require 'digest/md5' - opoo <<-EOS.undent - MD5 support is deprecated and will be removed in a future version. - Please switch this formula to #{Checksum::TYPES.map { |t| t.to_s.upcase } * ' or '}. + odie <<-EOS.undent + MD5 support has been dropped for security reasons. + Please switch this formula to SHA256. EOS - incremental_hash(Digest::MD5) end end -- cgit v1.2.3