Jump to content

Request for Signed Packages (SHA256)


Recommended Posts

Since SHA1 is not secure & and it's disabled by default in centos 9 and later, could we get the beta packages / next major release to be signed with SHA256 instead of SHA1? 

Thank you for your guys help! 

Edited by Kevin.C
Link to comment
Share on other sites

  • Kevin.C changed the title to Request for Signed Packages (SHA256)

cc @attila 

Currently unable to run this on CentOS 9 as a result of this, could i get your help with getting the latest beta package signed with SHA256? 

Thank you so much for the help & support here! 

 

Link to comment
Share on other sites

@Kevin.C Will SHA512 work? I downloaded the rpm packages from our website and ran rpm -qip and looked at the signature field. All of them, with the exception of Waveforms, appears to be signed with RSA/SHA512. Please let me know if this works and I will work with Attila to get Waveforms signed with SHA512.

 

malexander@vm-u22-lts:~/Downloads$ ls
digilent.adept.runtime-2.27.9.aarch64.rpm  digilent.adept.runtime-2.27.9.x86_64.rpm    digilent.adept.utilities-2.7.1.i686.rpm
digilent.adept.runtime-2.27.9.armhf.rpm    digilent.adept.utilities-2.7.1.aarch64.rpm  digilent.adept.utilities-2.7.1.x86_64.rpm
digilent.adept.runtime-2.27.9.i686.rpm     digilent.adept.utilities-2.7.1.armhf.rpm    digilent.waveforms_beta_3.22.18.x86_64.rpm
malexander@vm-u22-lts:~/Downloads$ rpm -qip *.rpm
Name        : digilent.adept.runtime
Version     : 2.27.9
Release     : 1
Architecture: aarch64
Install Date: (not installed)
Group       : System Environment/Libraries
Size        : 25044427
License     : see /usr/share/doc/digilent.adept.runtime-2.27.9/EULA and /usr/share/doc/digilent.adept.runtime-2.27.9/license-openssl-ssleay.txt
Signature   : RSA/SHA512, Tue 19 Mar 2024 10:37:39 AM PDT, Key ID 134da9ebeb58bc22
Source RPM  : digilent.adept.runtime-2.27.9-1.src.rpm
Build Date  : Mon 30 Jan 2023 02:03:57 PM PST
Build Host  : rpi4-ubuntu64
Packager    : Digilent, Inc. <support@digilentinc.com>
Vendor      : Digilent, Inc.
Summary     : Digilent Adept Runtime
Description :
The Adept Runtime consists of the shared libraries, firmware images,
drivers, and configuration files necessary to communicate with Digilent's
devices.
Name        : digilent.adept.runtime
Version     : 2.27.9
Release     : 1
Architecture: armhf
Install Date: (not installed)
Group       : System Environment/Libraries
Size        : 21202338
License     : see /usr/share/doc/digilent.adept.runtime-2.27.9/EULA and /usr/share/doc/digilent.adept.runtime-2.27.9/license-openssl-ssleay.txt
Signature   : RSA/SHA512, Tue 19 Mar 2024 10:37:54 AM PDT, Key ID 134da9ebeb58bc22
Source RPM  : digilent.adept.runtime-2.27.9-1.src.rpm
Build Date  : Mon 30 Jan 2023 01:27:45 PM PST
Build Host  : rpi4-ubuntu32
Packager    : Digilent, Inc. <support@digilentinc.com>
Vendor      : Digilent, Inc.
Summary     : Digilent Adept Runtime
Description :
The Adept Runtime consists of the shared libraries, firmware images,
drivers, and configuration files necessary to communicate with Digilent's
devices.
Name        : digilent.adept.runtime
Version     : 2.27.9
Release     : 1
Architecture: i686
Install Date: (not installed)
Group       : System Environment/Libraries
Size        : 23160188
License     : see /usr/share/doc/digilent.adept.runtime-2.27.9/EULA and /usr/share/doc/digilent.adept.runtime-2.27.9/license-openssl-ssleay.txt
Signature   : RSA/SHA512, Tue 19 Mar 2024 10:37:54 AM PDT, Key ID 134da9ebeb58bc22
Source RPM  : digilent.adept.runtime-2.27.9-1.src.rpm
Build Date  : Mon 30 Jan 2023 11:31:24 AM PST
Build Host  : michael-u16-32
Packager    : Digilent, Inc. <support@digilentinc.com>
Vendor      : Digilent, Inc.
Summary     : Digilent Adept Runtime
Description :
The Adept Runtime consists of the shared libraries, firmware images,
drivers, and configuration files necessary to communicate with Digilent's
devices.
Name        : digilent.adept.runtime
Version     : 2.27.9
Release     : 1
Architecture: x86_64
Install Date: (not installed)
Group       : System Environment/Libraries
Size        : 25120940
License     : see /usr/share/doc/digilent.adept.runtime-2.27.9/EULA and /usr/share/doc/digilent.adept.runtime-2.27.9/license-openssl-ssleay.txt
Signature   : RSA/SHA512, Tue 19 Mar 2024 10:37:55 AM PDT, Key ID 134da9ebeb58bc22
Source RPM  : digilent.adept.runtime-2.27.9-1.src.rpm
Build Date  : Mon 30 Jan 2023 11:47:30 AM PST
Build Host  : michael-u16-64
Packager    : Digilent, Inc. <support@digilentinc.com>
Vendor      : Digilent, Inc.
Summary     : Digilent Adept Runtime
Description :
The Adept Runtime consists of the shared libraries, firmware images,
drivers, and configuration files necessary to communicate with Digilent's
devices.
Name        : digilent.adept.utilities
Version     : 2.7.1
Release     : 1
Architecture: aarch64
Install Date: (not installed)
Group       : Applications/Communications
Size        : 6042364
License     : see /usr/share/doc/adeptruntime/copyright
Signature   : RSA/SHA512, Tue 19 Mar 2024 10:37:55 AM PDT, Key ID 134da9ebeb58bc22
Source RPM  : digilent.adept.utilities-2.7.1-1.src.rpm
Build Date  : Tue 13 Jul 2021 05:14:31 PM PDT
Build Host  : rpi4-ubuntu64
Packager    : Digilent, Inc. <support@digilentinc.com>
Vendor      : Digilent, Inc.
Summary     : Digilent Adept Utilities
Description :
Adept Utilities is a set of command line applications that can
be used in conjunction with the Adept Runtime to manage and communicate
with Digilent's devices.

Currently Adept Utilities consists of three applications: Digilent Adept
Utility (dadutil), Digilent JTAG Config Utility (djtgcfg), and Digilent
NetFPGA-SUME Flash Configuration Utility (dsumecfg). The Adept
Utility provides a command line interface for discovering Digilent devices,
querying device information, manipulating the device table, and setting
device information. The JTAG Config Utility allows users to initialize,
program, and erase FPGAs and CPLDs on Digilent boards using a command line
interface. The NetFPGA-SUME Flash Configuration Utility allows users to
write bit or bin files to a specific section of the flash memory on
Digilent's NetFPGA-SUME.

For more information please consult the associated man documentation.
Name        : digilent.adept.utilities
Version     : 2.7.1
Release     : 1
Architecture: armhf
Install Date: (not installed)
Group       : Applications/Communications
Size        : 6013249
License     : see /usr/share/doc/adeptruntime/copyright
Signature   : RSA/SHA512, Tue 19 Mar 2024 10:37:56 AM PDT, Key ID 134da9ebeb58bc22
Source RPM  : digilent.adept.utilities-2.7.1-1.src.rpm
Build Date  : Tue 13 Jul 2021 05:43:01 PM PDT
Build Host  : rpi4-ubuntu32
Packager    : Digilent, Inc. <support@digilentinc.com>
Vendor      : Digilent, Inc.
Summary     : Digilent Adept Utilities
Description :
Adept Utilities is a set of command line applications that can
be used in conjunction with the Adept Runtime to manage and communicate
with Digilent's devices.

Currently Adept Utilities consists of three applications: Digilent Adept
Utility (dadutil), Digilent JTAG Config Utility (djtgcfg), and Digilent
NetFPGA-SUME Flash Configuration Utility (dsumecfg). The Adept
Utility provides a command line interface for discovering Digilent devices,
querying device information, manipulating the device table, and setting
device information. The JTAG Config Utility allows users to initialize,
program, and erase FPGAs and CPLDs on Digilent boards using a command line
interface. The NetFPGA-SUME Flash Configuration Utility allows users to
write bit or bin files to a specific section of the flash memory on
Digilent's NetFPGA-SUME.

For more information please consult the associated man documentation.
Name        : digilent.adept.utilities
Version     : 2.7.1
Release     : 1
Architecture: i686
Install Date: (not installed)
Group       : Applications/Communications
Size        : 6013794
License     : see /usr/share/doc/adeptruntime/copyright
Signature   : RSA/SHA512, Tue 19 Mar 2024 10:37:56 AM PDT, Key ID 134da9ebeb58bc22
Source RPM  : digilent.adept.utilities-2.7.1-1.src.rpm
Build Date  : Tue 13 Jul 2021 04:15:52 PM PDT
Build Host  : michael-u16-32
Packager    : Digilent, Inc. <support@digilentinc.com>
Vendor      : Digilent, Inc.
Summary     : Digilent Adept Utilities
Description :
Adept Utilities is a set of command line applications that can
be used in conjunction with the Adept Runtime to manage and communicate
with Digilent's devices.

Currently Adept Utilities consists of three applications: Digilent Adept
Utility (dadutil), Digilent JTAG Config Utility (djtgcfg), and Digilent
NetFPGA-SUME Flash Configuration Utility (dsumecfg). The Adept
Utility provides a command line interface for discovering Digilent devices,
querying device information, manipulating the device table, and setting
device information. The JTAG Config Utility allows users to initialize,
program, and erase FPGAs and CPLDs on Digilent boards using a command line
interface. The NetFPGA-SUME Flash Configuration Utility allows users to
write bit or bin files to a specific section of the flash memory on
Digilent's NetFPGA-SUME.

For more information please consult the associated man documentation.
Name        : digilent.adept.utilities
Version     : 2.7.1
Release     : 1
Architecture: x86_64
Install Date: (not installed)
Group       : Applications/Communications
Size        : 6039466
License     : see /usr/share/doc/adeptruntime/copyright
Signature   : RSA/SHA512, Tue 19 Mar 2024 10:37:56 AM PDT, Key ID 134da9ebeb58bc22
Source RPM  : digilent.adept.utilities-2.7.1-1.src.rpm
Build Date  : Tue 13 Jul 2021 04:45:04 PM PDT
Build Host  : michael-u16-64
Packager    : Digilent, Inc. <support@digilentinc.com>
Vendor      : Digilent, Inc.
Summary     : Digilent Adept Utilities
Description :
Adept Utilities is a set of command line applications that can
be used in conjunction with the Adept Runtime to manage and communicate
with Digilent's devices.

Currently Adept Utilities consists of three applications: Digilent Adept
Utility (dadutil), Digilent JTAG Config Utility (djtgcfg), and Digilent
NetFPGA-SUME Flash Configuration Utility (dsumecfg). The Adept
Utility provides a command line interface for discovering Digilent devices,
querying device information, manipulating the device table, and setting
device information. The JTAG Config Utility allows users to initialize,
program, and erase FPGAs and CPLDs on Digilent boards using a command line
interface. The NetFPGA-SUME Flash Configuration Utility allows users to
write bit or bin files to a specific section of the flash memory on
Digilent's NetFPGA-SUME.

For more information please consult the associated man documentation.
Name        : digilent.waveforms
Version     : 3.22.18
Release     : 1
Architecture: x86_64
Install Date: (not installed)
Group       : Engineering/misc
Size        : 68189182
License     : see /usr/share/doc/digilent-waveforms/copyright
Signature   : RSA/SHA1, Fri 12 Apr 2024 01:23:28 AM PDT, Key ID 134da9ebeb58bc22
Source RPM  : digilent.waveforms-3.22.18-1.src.rpm
Build Date  : Fri 12 Apr 2024 01:23:10 AM PDT
Build Host  : attila-u16-64
Summary     : Digilent WaveForms
Description :
Digilent WaveForms Application, Runtime and SDK.
Support for Digilent Scopes & Instruments products.

Link to comment
Share on other sites

Hi, SHA512 is fine! 

Thank you for the support here -- is there a general timeline for this this being done? When do you guys expect the next beta release for Waveforms to be? 

Thank you guys, and let me know if i can answer any more questions. 

@malexander @attila

Link to comment
Share on other sites

`rpm -qip digilent.waveforms_beta_3.22.19.x86_64.rpm`

warning: digilent.waveforms_beta_3.22.19.x86_64.rpm: Header V4 RSA/SHA256 Signature, key ID eb58bc22: NOKEY
Name        : digilent.waveforms
Version     : 3.22.19
Release     : 1
Architecture: x86_64
Install Date: (not installed)
Group       : Engineering/misc
Size        : 68199451
License     : see /usr/share/doc/digilent-waveforms/copyright
Signature   : RSA/SHA256, Tue Apr 23 11:54:07 2024, Key ID 134da9ebeb58bc22
Source RPM  : digilent.waveforms-3.22.19-1.src.rpm
Build Date  : Mon Apr 22 09:47:27 2024
Build Host  : attila-u16-64
Summary     : Digilent WaveForms
Description :
Digilent WaveForms Application, Runtime and SDK.
Support for Digilent Scopes & Instruments products.

looks fine to me! is this the official 3.22.19 release? 

Link to comment
Share on other sites

Hi @Kevin.C,

3.22.19 is an "official" beta build (https://forum.digilent.com/topic/8908-waveforms-beta-download/) as opposed to a formal release (though the difference between a beta build and a formal release mostly boils down to the amount of documentation involved along extra hunting for bugs).

I do not anticipate a formal release version to be made for at least a couple of months; it depends when a new Digilent Test and Measurement device comes out, but I have not seen any announcements as of yet.

I will make a note to ping you once a release version has been made.

Let me know if you have any questions.

Thanks,
JColvin

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...