[SOLR-14649] Package manager should use SHA512, not SHA1

• Type: Improvement
• Status: Open
• Priority: Critical
• Resolution: Unresolved
• Component/s: Plugin system
• Assignee: Unassigned
• Reporter: Ishan Chattopadhyaya
• Created: 14/Jul/20 12:49
• Updated: 19/Aug/21 10:26

Description

Due to a massive oversight, we only support SHA1 based package signing. We should immediately switch to SHA512. Post that, all existing packages must be re-signed with SHA512.