Skip to content

Commit 87bd36c

Browse files
TUN-7064: RPM digests are now sha256 instead of md5sum
1 parent de4fd47 commit 87bd36c

File tree

1 file changed

+5
-2
lines changed

1 file changed

+5
-2
lines changed

Makefile

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -108,6 +108,9 @@ else
108108
PACKAGE_ARCH := $(TARGET_ARCH)
109109
endif
110110

111+
#for FIPS compliance, FPM defaults to MD5.
112+
RPM_DIGEST := --rpm-digest sha256
113+
111114
.PHONY: all
112115
all: cloudflared test
113116

@@ -163,13 +166,13 @@ define build_package
163166
mkdir -p $(PACKAGE_DIR)
164167
cp cloudflared $(PACKAGE_DIR)/cloudflared
165168
cp cloudflared.1 $(PACKAGE_DIR)/cloudflared.1
166-
fakeroot fpm -C $(PACKAGE_DIR) -s dir -t $(1) \
169+
fpm -C $(PACKAGE_DIR) -s dir -t $(1) \
167170
--description 'Cloudflare Tunnel daemon' \
168171
--vendor 'Cloudflare' \
169172
--license 'Apache License Version 2.0' \
170173
--url 'https://github.com/cloudflare/cloudflared' \
171174
-m 'Cloudflare <[email protected]>' \
172-
-a $(PACKAGE_ARCH) -v $(VERSION) -n $(DEB_PACKAGE_NAME) $(NIGHTLY_FLAGS) --after-install postinst.sh --after-remove postrm.sh \
175+
-a $(PACKAGE_ARCH) -v $(VERSION) -n $(DEB_PACKAGE_NAME) $(RPM_DIGEST) $(NIGHTLY_FLAGS) --after-install postinst.sh --after-remove postrm.sh \
173176
cloudflared=$(INSTALL_BINDIR) cloudflared.1=$(INSTALL_MANDIR)
174177
endef
175178

0 commit comments

Comments
 (0)