[Distutils] Migrating Hashes from MD5 to SHA256

[Donald Stufft]

On Jul 26, 2013, at 4:59 PM, PJ Eby <pje at telecommunity.com> wrote:

> On Fri, Jul 26, 2013 at 3:14 PM, Donald Stufft <donald at stufft.io> wrote:
>> Does the hashlib backport I added to
>> setuptools 0.9 for Python 2.4 work on 2.3? It's a pure python
>> implementation of hashlib.
> 
> Ah, didn't know about that!  I can't imagine what problems there would
> be; not much changed in 2.4 that can't be emulated in 2.3.
> 
> Anyway, I'll have a look.  Thanks!

Here's the relevant commits in the new setuptools stuff:

https://bitbucket.org/pypa/setuptools/commits/330b628f38c9380c95a818e65fd56812cbc854c4
https://bitbucket.org/pypa/setuptools/commits/b1d4e48beebdcc3cf7cb06fae4c4005a85dfc9bc
https://bitbucket.org/pypa/setuptools/commits/12dd4b89148a225856a060cbee1137fc4cf79736

The implementations are taken from PyPy so they are made
to work on Python 2.7, but they worked just fine on 2.4 after
removing a single b"".

> 
> 
>> I don't have a Python 2.3 available to attempt to test. To be honest I've
>> never even used Python 2.3.
> 
> Heh.  Noob.  ;-)  (j/k)

:) I was still in high school when the last 2.3 was released :/

> 
> 2.3 is basically 2.4 minus decorators, generator expressions, various
> builtins and stdlib features.  Unless you used set types, reversed(),
> or various other odds and ends, I should be able to backport it.

Great!

> 
> 
>> [stuff about RHEL support]
> 
> If there's a 2.4 hashlib backport, that addresses my concerns just
> fine.  If I need to, I'll backport it to setuptools 0.6.  Thanks.


-----------------
Donald Stufft
PGP: 0x6E3CBCE93372DCFA // 7C6B 7C5D 5E2B 6356 A926 F04F 6E3C BCE9 3372 DCFA

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://mail.python.org/pipermail/distutils-sig/attachments/20130726/31b4ab1b/attachment-0001.pgp>