#5846: move away from md5 for look-aside cache

[Fedora Release Engineering]

#5846: move away from md5 for look-aside cache
-------------------+-----------------------
  Reporter:  till  |      Owner:  rel-eng@…
      Type:  task  |     Status:  new
 Milestone:        |  Component:  other
Resolution:        |   Keywords:
Blocked By:        |   Blocking:
-------------------+-----------------------

Comment (by bochecha):

 A few explanations on the patches I just attached.

 The pyrpkg patch introduces a new option in the configuration file:
 lookasidefallbackhash.

 This hash is to be used when the **verification** fails using the normal
 lookasidehash. However, files are always uploaded with the normal
 lookasidehash.

 Then, the fedpkg changes just adapt to that new option, and set the
 lookasidehash sha256 instead of md5, while setting the new
 lookasidefallbackhash to md5.

 With these 3 changes applied, fedpkg now uploads sources with the sha256
 hash, but can still verify previously uploaded sources.

-- 
Ticket URL: <https://fedorahosted.org/rel-eng/ticket/5846#comment:4>
Fedora Release Engineering <http://fedorahosted.org/rel-eng>
Release Engineering for the Fedora Project