depot: force SHA256 digest for signing archives

2018-01-18 11:11:31 +01:00
parent 562325a28b
commit dcce0a1032
1 changed files with 2 additions and 1 deletions
--- a/tool/depot/publish
+++ b/tool/depot/publish
@@ -69,7 +69,8 @@ TARGETS := $(addsuffix .tar.xz.sig,$(addprefix $(PUBLIC_DIR)/,$(ARCHIVES)))

 $(PUBLIC_DIR)/%.tar.xz.sig : $(PUBLIC_DIR)/%.tar.xz
 	$(VERBOSE)rm -f $@;
-	$(VERBOSE)gpg --detach-sign --no-tty --use-agent --local-user $(call pubkey_id,$*) $<
+	$(VERBOSE)gpg --detach-sign --digest-algo SHA256 --no-tty --use-agent \
+	              --local-user $(call pubkey_id,$*) $<

 .PRECIOUS: $(TARGETS:.tar.xz.sig=.tar.xz)