| Subject: | Broken SIGNATURE File for SHA-256 |
According to the Module::Signature docs, it should be possible to use digest algorithms other than SHA-1 by setting the $Cipher variable. However, attempting to use SHA-256 by setting $Cipher to 'SHA256' (or 'SHA-256') results in a broken SIGNATURE file with a header and trailer, but no entries.
I've marked this bug as IMPORTANT since many in the crypto community no longer consider SHA-1 to be safe, and are recommending SHA-256 as a natural replacement.
$ perl -V
Summary of my perl5 (revision 5 version 8 subversion 6) configuration:
Platform:
osname=darwin, osvers=7.7.0, archname=darwin-64int-2level
uname='darwin mac.home 7.7.0 darwin kernel version 7.7.0: sun nov 7 16:06:51 pst 2004; root:xnuxnu-517.9.5.obj~1release_ppc power macintosh powerpc '
config_args='-de -Duse64bitint'
hint=recommended, useposix=true, d_sigaction=define
usethreads=undef use5005threads=undef useithreads=undef usemultiplicity=undef
useperlio=define d_sfio=undef uselargefiles=define usesocks=undef
use64bitint=define use64bitall=undef uselongdouble=undef
usemymalloc=n, bincompat5005=undef
Compiler:
cc='cc', ccflags ='-fno-common -DPERL_DARWIN -no-cpp-precomp -fno-strict-aliasing -pipe -I/usr/local/include',
optimize='-Os',
cppflags='-no-cpp-precomp -fno-common -DPERL_DARWIN -no-cpp-precomp -fno-strict-aliasing -pipe -I/usr/local/include'
ccversion='', gccversion='3.3 20030304 (Apple Computer, Inc. build 1495)', gccosandvers=''
intsize=4, longsize=4, ptrsize=4, doublesize=8, byteorder=87654321
d_longlong=define, longlongsize=8, d_longdbl=define, longdblsize=8
ivtype='long long', ivsize=8, nvtype='double', nvsize=8, Off_t='off_t', lseeksize=8
alignbytes=8, prototype=define
Linker and Libraries:
ld='env MACOSX_DEPLOYMENT_TARGET=10.3 cc', ldflags =' -L/usr/local/lib'
libpth=/usr/local/lib /usr/lib
libs=-ldbm -ldl -lm -lc
perllibs=-ldl -lm -lc
libc=/usr/lib/libc.dylib, so=dylib, useshrplib=false, libperl=libperl.a
gnulibc_version=''
Dynamic Linking:
dlsrc=dl_dyld.xs, dlext=bundle, d_dlsymun=undef, ccdlflags=' '
cccdlflags=' ', lddlflags=' -bundle -undefined dynamic_lookup -L/usr/local/lib'
Characteristics of this binary (from libperl):
Compile-time options: USE_64_BIT_INT USE_LARGE_FILES
Built under darwin
Compiled at Jan 30 2005 04:23:36
@INC:
/usr/local/lib/perl5/5.8.6/darwin-64int-2level
/usr/local/lib/perl5/5.8.6
/usr/local/lib/perl5/site_perl/5.8.6/darwin-64int-2level
/usr/local/lib/perl5/site_perl/5.8.6
/usr/local/lib/perl5/site_perl/5.8.5/darwin-64int-2level
/usr/local/lib/perl5/site_perl/5.8.5
/usr/local/lib/perl5/site_perl
.