Changing the default message digest algorithm

Change the default message digest algorithm from SHA to MD5 only if absolutely necessary. Edit the installver.bat file or the installver.sh file to make the change. Changing the algorithm invalidates the SHA-based checksums in the product bill of materials. For this reason, verify the product files before changing the message digest algorithm.

 

Before you begin

Install the product before attempting to change the default message digest algorithm from SHA to MD5.

 

About this task

The default message digest algorithm is one of the secure hash algorithms (SHA) that are part of the Secure Hash Standard (SHS) from the National Institute of Standards and Technology (NIST). See the Federal Information Processing Standards (FIPS) publication 180-2 for more information. SHA-1 is the standard hash function of the U.S. government.

Also available is the older MD5 message digest algorithm. MD5 is a deprecated type of message algorithm that is not as secure as SHA and is provided only for backward compatibility.

This topic describes changing the default message digest algorithm. You must edit the installver.bat file or the installver.sh file to change the algorithm.

 

Procedure

Add the following environmental property to the script file:

-Dchecksum.type=MD5
The default value is

-Dchecksum.type=SHA

 

What to do next

Go to Handling out-of-memory situations to learn more about the installver command.


Related tasks
Excluding files from a checksum comparison Handling out-of-memory situations Verifying checksums of installed files