[release/6.0] Use SHA256 for RPM digest

[NikolaMilosavljevic]

Backport of #52664

FIPS compliance blocks installation of RPM packages that use MD5 digest algorithm. We use fpm tool which defaults to MD5 digests. The fix is to specify SHA256 instead.

The fix was made in arcade with dotnet/arcade#14269, installer fix is in dotnet/installer#17933

This is the same fix that was made by many other RPM package owners, for instance: https://github.com/influxdata/telegraf

[ghost]

Hi @NikolaMilosavljevic. If this is not a tell-mode PR, please make sure to follow the instructions laid out in the servicing process document.
Otherwise, please add tell-mode label.

[ghost]

Hey @dotnet/aspnet-build, looks like this PR is something you want to take a look at.

[ghost]

Hi @NikolaMilosavljevic. Please make sure you've updated the PR description to use the Shiproom Template. Also, make sure this PR is not marked as a draft and is ready-to-merge.

To learn more about how to prepare a servicing PR click here.

[ghost]

Hi @NikolaMilosavljevic. This PR was just approved to be included in the upcoming servicing release. Somebody from the @dotnet/aspnet-build team will get it merged when the branches are open. Until then, please make sure all the CI checks pass and the PR is reviewed.

[NikolaMilosavljevic]

This was approved for servicing.

[NikolaMilosavljevic]

Not merging to minimize risk for .NET 6 customers.

[ghost]

Hi @NikolaMilosavljevic. It looks like you just commented on a closed PR. The team will most probably miss it. If you'd like to bring something important up to their attention, consider filing a new issue and add enough details to build context.

[wtgodbe]

@NikolaMilosavljevic do we want to take this for April?

[wtgodbe]

/azp run

[azure-pipelines]

Azure Pipelines successfully started running 2 pipeline(s).

[NikolaMilosavljevic]

@NikolaMilosavljevic do we want to take this for April?

That's the plan, but we're circling back with Tactics tomorrow, before merging the PRs.

@leecow

[NikolaMilosavljevic]

@wtgodbe this can be merged now. I don't have permissions.