Re: Add SHA512 digests to package metadata

[Joerg Sonnenberger <joerg%britannica.bec.de@localhost>]

On Mon, Oct 19, 2015 at 11:29:48AM -0700, Alistair Crooks wrote:
> Right now, we use MD5 sums only to verify that individual files in
> package metadata have not been modified. Whilst this is not the end of
> the world, it needs to be fixed. It also needs to be fixed fairly
> sharpish. Diffs at:
> 
> http://ftp.netbsd.org/pub/pkgsrc/misc/agc/pkg_install-20151017.diff

Please don't duplicate the SHA2 code from libnbcompat. I'd prefer to
stop the abuse of @comment for this as well, but that does require a
tools bump.

Joerg