use sha256sum instead of md5sum

[lordfolken]

md5 is no longer a viable algorithm guarding against manipulation.

[lordfolken]

@coderabbitai please create a pr for replacing the md5 sum handling with sha256sums in downloader.py. Assume there is a checksums.sha256 file at the source available for reference.

[coderabbitai]

Tip

For best results, initiate chat on the files or code changes.

🧩 Analysis chain

@lordfolken I'll help you create a PR to replace MD5 with SHA256 checksums in downloader.py. Let me first examine the current implementation to understand how checksums are handled.

---

🏁 Script executed:

#!/bin/bash
# Find and read the downloader.py file
fd downloader.py --exec cat {}

Length of output: 4488

---

🏁 Script executed:

#!/bin/bash
# Look for any existing checksum files to understand the format
fd -e md5 -e sha256 -e checksum | head -10

Length of output: 44

---

🏁 Script executed:

#!/bin/bash
# Search for MD5 related code patterns in the codebase
rg -i "md5" --type py -A 3 -B 3

Length of output: 3199

---

Perfect! I can see the current MD5 implementation in the downloader.py file. Let me plan the changes needed to replace MD5 with SHA256 checksums.

Task: Replace MD5 with SHA256 checksums in downloader.py

• Update server checksum file from "checksums" to "checksums.sha256"
• Change local checksum file extension from ".md5" to ".sha256"
• Replace MD5 hashing algorithm with SHA256
• Update variable names and comments for clarity

I've planned the complete migration from MD5 to SHA256 checksums. The changes include:

1. Server checksum file: Changed from "checksums" to "checksums.sha256"
2. Local checksum files: Changed extension from .md5 to .sha256
3. Hashing algorithm: Replaced hashlib.md5() with hashlib.sha256()
4. Variable names: Updated md5_path to sha256_path and md5 to sha256

The implementation maintains the same logic flow but uses the more secure SHA256 algorithm. Once you confirm the checksums.sha256 file is available on the server, another agent will execute these changes and create the pull request for you.

---

⏳ Preparing changes...

[coderabbitai]

A summary of the changes CodeRabbit can apply:

• Update the file lib/xcsoar/mapgen/downloader.py to replace all references and operations from MD5 checksums to SHA256, including renaming checksum files, changing file extensions from .md5 to .sha256, and switching the hash algorithm from MD5 to SHA256 for improved security and consistency.

• Executed edits - (🔄 Check again to try again)

[coderabbitai]

Creating a PR to execute the edits....

The changes have been created in this pull request: View PR