php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #70577 Windows download page should list sha2, not just sha1
Submitted: 2015-09-24 22:40 UTC Modified: 2017-07-12 14:39 UTC
From: jb-sitecomments at wisemo dot com Assigned: ab (profile)
Status: Closed Package: Website problem
PHP Version: Irrelevant OS: Windows
Private report: No CVE-ID: None
View Add Comment Developer Edit
 [2015-09-24 22:40 UTC] jb-sitecomments at wisemo dot com 
Description:
------------
The download page http://windows.php.net/download/ lists SHA1 sums for each download.  SHA1 is weak and should not really be used (except as a service to those who have no better choice).

I would thus respectfully suggest that the page also lists checksums with a more current algorithm, such as SHA256.



Test script:
---------------
http://windows.php.net/download/

Expected result:
----------------
VC11 x86 Non Thread Safe (2015-Sep-04 02:39:02)

    Zip [18.78MB]

    sha1: 5eb81713e9230c416429c32ca85103fbe45d8c2f
    sha256: 0d17882e2c05b68d5faf9296b3057c87157247027de2a7d5bdf844e3a56ab8fc

etc.

Actual result:
--------------
VC11 x86 Non Thread Safe (2015-Sep-04 02:39:02)

    Zip [18.78MB]

    sha1: 5eb81713e9230c416429c32ca85103fbe45d8c2f

etc.

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2017-07-12 14:39 UTC] ab@php.net
-Status: Open +Status: Closed -Assigned To: +Assigned To: ab
 [2017-07-12 14:39 UTC] ab@php.net 
Fixed. Thanks.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Tue May 21 05:01:31 2024 UTC