[poky] uninnative and md5 checksum?

[Richard Purdie]

On Wed, 2016-03-23 at 12:23 +0100, Holger Freyther wrote:
> Hi,
> 
> our jenkins started to fail with yocto-master and I started to take a
> look. I noticed that uninative binaries are being downloaded from the
> network. It is not great to download binaries from the network and
> execute but fair enough there is a checksum.
> 
> But the choice of md5 as checksum is a bit odd (md5 and sha1 are
> effectively broken), can this be moved to sha3 or sha256sum?

We use the fetcher's checksuming support so I guess sha256 would be the
better choice. It can be changed, at the expense of a bit of pain
making sure all the changes work smoothly.

Cheers,

Richard