php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #70577 Windows download page should list sha2, not just sha1
Submitted: 2015-09-24 22:40 UTC Modified: 2017-07-12 14:39 UTC
From: jb-sitecomments at wisemo dot com Assigned: ab (profile)
Status: Closed Package: Website problem
PHP Version: Irrelevant OS: Windows
Private report: No CVE-ID: None
View Add Comment Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
You can add a comment by following this link or if you reported this bug, you can edit this bug over here.
(description)
Block user comment
Status: Assign to:
Package:
Bug Type:
Summary:
From: jb-sitecomments at wisemo dot com
New email:
PHP Version: OS:

 

 [2015-09-24 22:40 UTC] jb-sitecomments at wisemo dot com
Description:
------------
The download page http://windows.php.net/download/ lists SHA1 sums for each download.  SHA1 is weak and should not really be used (except as a service to those who have no better choice).

I would thus respectfully suggest that the page also lists checksums with a more current algorithm, such as SHA256.



Test script:
---------------
http://windows.php.net/download/

Expected result:
----------------
VC11 x86 Non Thread Safe (2015-Sep-04 02:39:02)

    Zip [18.78MB]

    sha1: 5eb81713e9230c416429c32ca85103fbe45d8c2f
    sha256: 0d17882e2c05b68d5faf9296b3057c87157247027de2a7d5bdf844e3a56ab8fc

etc.

Actual result:
--------------
VC11 x86 Non Thread Safe (2015-Sep-04 02:39:02)

    Zip [18.78MB]

    sha1: 5eb81713e9230c416429c32ca85103fbe45d8c2f

etc.


Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2017-07-12 14:39 UTC] ab@php.net
-Status: Open +Status: Closed -Assigned To: +Assigned To: ab
 [2017-07-12 14:39 UTC] ab@php.net
Fixed. Thanks.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Fri May 17 16:01:35 2024 UTC