build: add SHA256 checksums for downloaded dependencies

- Replace md5sum with sha256sum for verification of downloaded
  external and optional dependencies.

Type: improvement
Change-Id: I52c96098d3cfd4c1eaf599da44a7b859ad24f1a4
Signed-off-by: Andrew Yourtchenko <[email protected]>
Signed-off-by: Dave Wallace <[email protected]>

diff --git a/build/external/packages/dpdk.mk b/build/external/packages/dpdk.mk
index 7512ad8..6a2fac4 100644 (file)
--- a/build/external/packages/dpdk.mk
+++ b/build/external/packages/dpdk.mk
@@ -22,16 +22,9 @@ DPDK_MLX_IBV_LINK            ?= static
 dpdk_version                 ?= 24.07
 dpdk_base_url                ?= http://fast.dpdk.org/rel
 dpdk_tarball                 := dpdk-$(dpdk_version).tar.xz
-dpdk_tarball_md5sum_24.07    := 48151b1bd545cd95447979fa033199bb
-dpdk_tarball_md5sum_24.03    := a98da848d6ba09808ef00f9a26aaa49a
-dpdk_tarball_md5sum_23.11    := 896c09f5b45b452bd77287994650b916
-dpdk_tarball_md5sum_23.07    := 2b6d57f077585cb15b885482362fd47f
-dpdk_tarball_md5sum_23.03    := 3cf8ebbcd412d5726db230f2eeb90cc9
-dpdk_tarball_md5sum_22.11.1  := 0594708fe42ce186a55b0235c6e20cfe
-dpdk_tarball_md5sum_22.07    := fb73b58b80b1349cd05fe9cf6984afd4
-dpdk_tarball_md5sum_22.03    := a07ca8839f98062f46e1cc359735cce8
-dpdk_tarball_md5sum_21.11    := 58660bbbe9e95abce86e47692b196555
-dpdk_tarball_md5sum          := $(dpdk_tarball_md5sum_$(dpdk_version))
+dpdk_tarball_sha256sum_24.07 := 9944f7e5f268e7ac9b4193e2cd54ef6d98f6e1d7dddc967c77ae4f6616d6fbbd
+
+dpdk_tarball_sha256sum       := $(dpdk_tarball_sha256sum_$(dpdk_version))
 dpdk_url                     := $(dpdk_base_url)/$(dpdk_tarball)
 dpdk_tarball_strip_dirs      := 1
 ifeq ($(shell uname), FreeBSD)

diff --git a/build/external/packages/ipsec-mb.mk b/build/external/packages/ipsec-mb.mk
index 5c99082..59a1365 100644 (file)
--- a/build/external/packages/ipsec-mb.mk
+++ b/build/external/packages/ipsec-mb.mk
@@ -15,15 +15,9 @@ ipsec-mb_version             := 2.0
 ipsec-mb_patch_version       := 0
 ipsec-mb_version_str         := $(ipsec-mb_version).$(ipsec-mb_patch_version)
 ipsec-mb_tarball             := v$(ipsec-mb_version).tar.gz
-ipsec-mb_tarball_md5sum_1.0  := 906e701937751e761671dc83a41cff65
-ipsec-mb_tarball_md5sum_1.1  := 3916471d3713d27e42473cb6af9c65e5
-ipsec-mb_tarball_md5sum_1.2  := f551d9c208893a436c1f5c146a615bd6
-ipsec-mb_tarball_md5sum_1.3  := d8692db9efe32a263b61f12ac0dca950
-ipsec-mb_tarball_md5sum_1.4  := fddba2611f822296ddd82d1c31d22b24
-ipsec-mb_tarball_md5sum_1.5  := f18680f8dd43208a15a19a494423bdb9
-ipsec-mb_tarball_md5sum_2.0  := c0207b0a2136920461cc56aad06072a8
+ipsec-mb_tarball_sha256sum_2.0  := 0c60e56f63b14212c7b388668acc219cbc6b79e5e79732aff7542fefbb498413
 
-ipsec-mb_tarball_md5sum      := $(ipsec-mb_tarball_md5sum_$(ipsec-mb_version))
+ipsec-mb_tarball_sha256sum   := $(ipsec-mb_tarball_sha256sum_$(ipsec-mb_version))
 ipsec-mb_tarball_strip_dirs  := 1
 ipsec-mb_url                 := http://github.com/intel/intel-ipsec-mb/archive/$(ipsec-mb_tarball)
 ipsec-mb_system_header       := $(wildcard /usr/include/intel-ipsec-mb.h)

diff --git a/build/external/packages/octeon-roc.mk b/build/external/packages/octeon-roc.mk
index 98eb29b..3d90217 100644 (file)
--- a/build/external/packages/octeon-roc.mk
+++ b/build/external/packages/octeon-roc.mk
@@ -4,7 +4,7 @@
 
 octeon-roc_version             := 0.5
 octeon-roc_tarball             := v$(octeon-roc_version).tar.gz
-octeon-roc_tarball_md5sum      := 76bc56c84935da944bbf340fe5283ef0
+octeon-roc_tarball_sha256sum   := 030fc0f58d761525bf8814ed9d95f5ce999541b19bd75eb123dee90c9e2c52a0
 
 octeon-roc_tarball_strip_dirs  := 1
 octeon-roc_url                 := https://github.com/MarvellEmbeddedProcessors/marvell-octeon-roc/archive/refs/tags/$(octeon-roc_tarball)

diff --git a/build/external/packages/quicly.mk b/build/external/packages/quicly.mk
index 23fbd58..9fee59a 100644 (file)
--- a/build/external/packages/quicly.mk
+++ b/build/external/packages/quicly.mk
@@ -13,7 +13,7 @@
 
 quicly_version := 0.1.5-vpp
 quicly_tarball := quicly_$(quicly_version).tar.gz
-quicly_tarball_md5sum := fc388ccde2f7d677b92ff3cb3fd387e4
+quicly_tarball_sha256sum := fb50ad8ce1136561ee08df02131030d89e38acd2cf8e36c65c074f3bd5034938
 quicly_tarball_strip_dirs := 1
 quicly_url := https://github.com/vpp-quic/quicly/releases/download/v$(quicly_version)/quicly_$(quicly_version).tar.gz
 

diff --git a/build/external/packages/rdma-core.mk b/build/external/packages/rdma-core.mk
index 791a52c..fabacbd 100644 (file)
--- a/build/external/packages/rdma-core.mk
+++ b/build/external/packages/rdma-core.mk
@@ -25,10 +25,8 @@ RDMA_CORE_DEBUG?=n
 #
 rdma-core_version             := 52.0
 rdma-core_tarball             := rdma-core-$(rdma-core_version).tar.gz
-rdma-core_tarball_md5sum_49.0 := 9fe3909f19c7e0276c9e546411bbb49c
-rdma-core_tarball_md5sum_51.0 := ed95d79f782ea00bd7233d453abd60b3
-rdma-core_tarball_md5sum_52.0 := c78dba484aac72eb8586d88f7b399b0f
-rdma-core_tarball_md5sum      := $(rdma-core_tarball_md5sum_$(rdma-core_version))
+rdma-core_tarball_sha256sum_52.0 := 1f0ce5f2462c982b20d21156707076278807a7adf4d10e9142f3be4bec1b2b83
+rdma-core_tarball_sha256sum      := $(rdma-core_tarball_sha256sum_$(rdma-core_version))
 rdma-core_tarball_strip_dirs  := 1
 rdma-core_url                 := http://github.com/linux-rdma/rdma-core/releases/download/v$(rdma-core_version)/$(rdma-core_tarball)
 

diff --git a/build/external/packages/xdp-tools.mk b/build/external/packages/xdp-tools.mk
index b928597..08d94e4 100644 (file)
--- a/build/external/packages/xdp-tools.mk
+++ b/build/external/packages/xdp-tools.mk
@@ -14,8 +14,9 @@
 
 xdp-tools_version             := 1.2.9
 xdp-tools_tarball             := xdp-tools-$(xdp-tools_version).tar.gz
-xdp-tools_tarball_md5sum_1.2.9:= 6e4a49ceea8354bb7bb3b55990e9aed7
-xdp-tools_tarball_md5sum      := $(xdp-tools_tarball_md5sum_$(xdp-tools_version))
+xdp-tools_tarball_sha256sum_1.2.9 := 3f8d30bd2e00c522103d224014f59a95400144aba1f3b322c6ad473541a0f99e
+
+xdp-tools_tarball_sha256sum      := $(xdp-tools_tarball_sha256sum_$(xdp-tools_version))
 xdp-tools_tarball_strip_dirs  := 1
 xdp-tools_url                 := https://github.com/xdp-project/xdp-tools/releases/download/v$(xdp-tools_version)/$(xdp-tools_tarball)
 

diff --git a/build/optional/packages/openssl.mk b/build/optional/packages/openssl.mk
index 1c9c45b..8381782 100644 (file)
--- a/build/optional/packages/openssl.mk
+++ b/build/optional/packages/openssl.mk
@@ -13,7 +13,7 @@
 
 openssl_version             := 3.3.2
 openssl_tarball             := openssl-$(openssl_version).tar.gz
-openssl_tarball_md5sum      := 015fca2692596560b6fe8a2d8fecd84b
+openssl_tarball_sha256sum   := 2e8a40b01979afe8be0bbfb3de5dc1c6709fedb46d6c89c10da114ab5fc3d281
 
 openssl_tarball_strip_dirs  := 1
 openssl_url                 := https://github.com/openssl/openssl/releases/download/openssl-$(openssl_version)/$(openssl_tarball)

diff --git a/build/packages_common.mk b/build/packages_common.mk
index 92fa559..1006a06 100644 (file)
--- a/build/packages_common.mk
+++ b/build/packages_common.mk
@@ -41,12 +41,12 @@ $(D)/$($1_tarball):
 $(B)/.$1.download.ok: $(D)/$($1_tarball)
        @mkdir -p $(B)
        $$(call h1,"validating $1 $($1_version) checksum")
-       @SUM=$$(shell openssl md5 $$< | cut -f 2 -d " " -) ; \
-       ([ "$$$${SUM}" = "$($1_tarball_md5sum)" ] || \
+       @SHA256SUM=$$(shell openssl sha256 $$< | cut -f 2 -d " " -) ; \
+       (([ "$$$${SHA256SUM}" = "$($1_tarball_sha256sum)" ] && echo "SHA256 OK") || \
        ( echo "==========================================================" && \
          echo "Bad Checksum!" && \
-         echo "Expected:   $($1_tarball_md5sum)" && \
-         echo "Calculated: $$$${SUM}" && \
+         echo "Expected SHA256:   $($1_tarball_sha256)" && \
+         echo "Calculated SHA256: $$$${SHA256SUM}" && \
          echo "Please remove $$< and retry" && \
          echo "==========================================================" && \
          false ))

diff --git a/src/plugins/srtp/srtp_plugin.rst b/src/plugins/srtp/srtp_plugin.rst
index 568ebb6..bbc4473 100644 (file)
--- a/src/plugins/srtp/srtp_plugin.rst
+++ b/src/plugins/srtp/srtp_plugin.rst
@@ -48,9 +48,9 @@ Custom libsrtp2 build
 
 ::
 
-   srtp_version := 2.3.0
-   srtp_tarball := srtp_$(srtp_version).tar.gz
-   srtp_tarball_md5sum := da38ee5d9c31be212a12964c22d7f795
+   srtp_version := 2.6.0
+   srtp_tarball := libsrtp_$(srtp_version).tar.gz
+   srtp_tarball_sha256sum := bf641aa654861be10570bfc137d1441283822418e9757dc71ebb69a6cf84ea6b
    srtp_tarball_strip_dirs := 1
    srtp_url := https://github.com/cisco/libsrtp/archive/v$(srtp_version).tar.gz