contrib: Use SHA256 instead of MD5 for contrib archive checksums.

Closes HandBrake#356.
paulmaurious · Dec 15, 2016 · 72bf6f7 · 72bf6f7
1 parent 010837e
commit 72bf6f7
Show file tree

Hide file tree

Showing 37 changed files with 147 additions and 147 deletions.
diff --git a/contrib/autoconf/module.defs b/contrib/autoconf/module.defs
@@ -1,6 +1,6 @@
 $(eval $(call import.MODULE.defs,AUTOCONF,autoconf,M4))
 $(eval $(call import.CONTRIB.defs,AUTOCONF))
 
-AUTOCONF.FETCH.url =  https://download.handbrake.fr/handbrake/contrib/autoconf-2.69.tar.gz
-AUTOCONF.FETCH.url += https://ftp.gnu.org/gnu/autoconf/autoconf-2.69.tar.gz
-AUTOCONF.FETCH.md5 =  82d05e03b93e45f5a39b828dc9c6c29b
+AUTOCONF.FETCH.url     = https://download.handbrake.fr/handbrake/contrib/autoconf-2.69.tar.gz
+AUTOCONF.FETCH.url    += https://ftp.gnu.org/gnu/autoconf/autoconf-2.69.tar.gz
+AUTOCONF.FETCH.sha256  = 954bd69b391edc12d6a4a51a2dd1476543da5c6bbf05a95b59dc0dd6fd4c2969
diff --git a/contrib/automake/module.defs b/contrib/automake/module.defs
@@ -1,10 +1,10 @@
 $(eval $(call import.MODULE.defs,AUTOMAKE,automake,AUTOCONF))
 $(eval $(call import.CONTRIB.defs,AUTOMAKE))
 
-AUTOMAKE.FETCH.url =  https://download.handbrake.fr/handbrake/contrib/automake-1.13.1.tar.gz
-AUTOMAKE.FETCH.url += https://ftp.gnu.org/gnu/automake/automake-1.13.1.tar.gz
-AUTOMAKE.FETCH.md5 =  78a0ef8216b0556b44508e7b5b0c0847
+AUTOMAKE.FETCH.url     = https://download.handbrake.fr/handbrake/contrib/automake-1.13.1.tar.gz
+AUTOMAKE.FETCH.url    += https://ftp.gnu.org/gnu/automake/automake-1.13.1.tar.gz
+AUTOMAKE.FETCH.sha256  = 51bc10031847e9965c4f2c16a0a66552309ce28ea82b1afa8cef736643ebaa27
 
 # TODO: automake >= 1.15
-#AUTOMAKE.FETCH.url = https://ftp.gnu.org/gnu/automake/automake-1.15.tar.gz
-#AUTOMAKE.FETCH.md5 = 716946a105ca228ab545fc37a70df3a3
+#AUTOMAKE.FETCH.url    = https://ftp.gnu.org/gnu/automake/automake-1.15.tar.gz
+#AUTOMAKE.FETCH.sha256 = 7946e945a96e28152ba5a6beb0625ca715c6e32ac55f2e353ef54def0c8ed924
diff --git a/contrib/bzip2/module.defs b/contrib/bzip2/module.defs
@@ -1,9 +1,9 @@
 $(eval $(call import.MODULE.defs,BZIP2,bzip2))
 $(eval $(call import.CONTRIB.defs,BZIP2))
 
-BZIP2.FETCH.url =  https://download.handbrake.fr/handbrake/contrib/bzip2-1.0.6-official.tar.gz
+BZIP2.FETCH.url  = https://download.handbrake.fr/handbrake/contrib/bzip2-1.0.6-official.tar.gz
 BZIP2.FETCH.url += http://www.bzip.org/1.0.6/bzip2-1.0.6.tar.gz
-BZIP2.FETCH.md5 =  00b516f4704d4a7cb50a1d97e6e8e15b
+BZIP2.FETCH.sha256    = a2848f34fcd5d6cf47def00461fcb528a0484d8edef8208d6d2e2909dc61d9cd
 BZIP2.FETCH.basename  = bzip2-1.0.6-official.tar.gz
 BZIP2.EXTRACT.tarbase = bzip2-1.0.6
 

diff --git a/contrib/cmake/module.defs b/contrib/cmake/module.defs
@@ -1,9 +1,9 @@
 $(eval $(call import.MODULE.defs,CMAKE,cmake))
 $(eval $(call import.CONTRIB.defs,CMAKE))
 
-CMAKE.FETCH.url =  https://download.handbrake.fr/handbrake/contrib/cmake-3.3.2.tar.gz
-CMAKE.FETCH.url += https://cmake.org/files/v3.3/cmake-3.3.2.tar.gz
-CMAKE.FETCH.md5 =  5febbd11bcaac854a27eebaf4a124be2
+CMAKE.FETCH.url     = https://download.handbrake.fr/handbrake/contrib/cmake-3.3.2.tar.gz
+CMAKE.FETCH.url    += https://cmake.org/files/v3.3/cmake-3.3.2.tar.gz
+CMAKE.FETCH.sha256  = e75a178d6ebf182b048ebfe6e0657c49f0dc109779170bad7ffcb17463f2fc22
 
 CMAKE.CONFIGURE.deps =
 CMAKE.CONFIGURE.shared =

diff --git a/contrib/fdk-aac/module.defs b/contrib/fdk-aac/module.defs
@@ -1,9 +1,9 @@
 $(eval $(call import.MODULE.defs,FDKAAC,fdkaac))
 $(eval $(call import.CONTRIB.defs,FDKAAC))
 
-FDKAAC.FETCH.url =  https://download.handbrake.fr/handbrake/contrib/fdk-aac-0.1.4.tar.gz
-FDKAAC.FETCH.url += https://sourceforge.net/projects/opencore-amr/files/fdk-aac/fdk-aac-0.1.4.tar.gz
-FDKAAC.FETCH.md5 =  e274a7d7f6cd92c71ec5c78e4dc9f8b7
+FDKAAC.FETCH.url     = https://download.handbrake.fr/handbrake/contrib/fdk-aac-0.1.4.tar.gz
+FDKAAC.FETCH.url    += https://sourceforge.net/projects/opencore-amr/files/fdk-aac/fdk-aac-0.1.4.tar.gz
+FDKAAC.FETCH.sha256  = 5910fe788677ca13532e3f47b7afaa01d72334d46a2d5e1d1f080f1173ff15ab
 
 # fdk-aac configure script fails to add compiler optimizations if the
 # CFLAGS env variable is set during configure.  Since we set it, we

diff --git a/contrib/ffmpeg/module.defs b/contrib/ffmpeg/module.defs
@@ -9,13 +9,13 @@ endif
 $(eval $(call import.MODULE.defs,FFMPEG,ffmpeg,$(__deps__)))
 $(eval $(call import.CONTRIB.defs,FFMPEG))
 
-FFMPEG.FETCH.url =  https://download.handbrake.fr/handbrake/contrib/libav-11.3.tar.gz
-FFMPEG.FETCH.url += https://libav.org/releases/libav-11.3.tar.gz
-FFMPEG.FETCH.md5 =  1a2eb461b98e0f1d1d6c4d892d51ac9b
+FFMPEG.FETCH.url     = https://download.handbrake.fr/handbrake/contrib/libav-11.3.tar.gz
+FFMPEG.FETCH.url    += https://libav.org/releases/libav-11.3.tar.gz
+FFMPEG.FETCH.sha256  = 5a6f6d5529d2074a5a9665bd3e048cbaefbfd88d57f0b59604baa0ce3602967e
 
 # TODO: libav >= 11.4
-#FFMPEG.FETCH.url = https://libav.org/releases/libav-11.4.tar.gz
-#FFMPEG.FETCH.md5 = 133fab51636f47d01c25b80f33f6ae3f
+#FFMPEG.FETCH.url    = https://libav.org/releases/libav-11.4.tar.gz
+#FFMPEG.FETCH.sha256 = 5a6f6d5529d2074a5a9665bd3e048cbaefbfd88d57f0b59604baa0ce3602967e
 
 FFMPEG.CONFIGURE.deps  =
 FFMPEG.CONFIGURE.host  =

diff --git a/contrib/fontconfig/module.defs b/contrib/fontconfig/module.defs
@@ -2,9 +2,9 @@ __deps__ := FREETYPE LIBXML2 LIBICONV
 $(eval $(call import.MODULE.defs,FONTCONFIG,fontconfig,$(__deps__)))
 $(eval $(call import.CONTRIB.defs,FONTCONFIG))
 
-FONTCONFIG.FETCH.url =  https://download.handbrake.fr/handbrake/contrib/fontconfig-2.12.1.tar.bz2
-FONTCONFIG.FETCH.url += https://www.freedesktop.org/software/fontconfig/release/fontconfig-2.12.1.tar.bz2
-FONTCONFIG.FETCH.md5 =  b5af5a423ee3b5cfc34846838963c058
+FONTCONFIG.FETCH.url     = https://download.handbrake.fr/handbrake/contrib/fontconfig-2.12.1.tar.bz2
+FONTCONFIG.FETCH.url    += https://www.freedesktop.org/software/fontconfig/release/fontconfig-2.12.1.tar.bz2
+FONTCONFIG.FETCH.sha256  = b449a3e10c47e1d1c7a6ec6e2016cca73d3bd68fbbd4f0ae5cc6b573f7d6c7f3
 
 #
 # Under MinGW:

diff --git a/contrib/freetype/module.defs b/contrib/freetype/module.defs
@@ -2,8 +2,8 @@ __deps__ := BZIP ZLIB
 $(eval $(call import.MODULE.defs,FREETYPE,freetype,$(__deps__)))
 $(eval $(call import.CONTRIB.defs,FREETYPE))
 
-FREETYPE.FETCH.url =  https://download.handbrake.fr/handbrake/contrib/freetype-2.6.5.tar.bz2
-FREETYPE.FETCH.url += https://download.savannah.gnu.org/releases/freetype/freetype-2.6.5.tar.bz2
-FREETYPE.FETCH.md5 =  6a386964e18ba28cb93370e57a19031b
+FREETYPE.FETCH.url     = https://download.handbrake.fr/handbrake/contrib/freetype-2.6.5.tar.bz2
+FREETYPE.FETCH.url    += https://download.savannah.gnu.org/releases/freetype/freetype-2.6.5.tar.bz2
+FREETYPE.FETCH.sha256  = e20a6e1400798fd5e3d831dd821b61c35b1f9a6465d6b18a53a9df4cf441acf0
 
 FREETYPE.CONFIGURE.extra = --with-harfbuzz=no --with-png=no
diff --git a/contrib/fribidi/module.defs b/contrib/fribidi/module.defs
@@ -5,9 +5,9 @@ endif
 $(eval $(call import.MODULE.defs,FRIBIDI,fribidi))
 $(eval $(call import.CONTRIB.defs,FRIBIDI))
 
-FRIBIDI.FETCH.url =  https://download.handbrake.fr/handbrake/contrib/fribidi-0.19.7.tar.bz2
-FRIBIDI.FETCH.url += https://fribidi.org/download/fribidi-0.19.7.tar.bz2
-FRIBIDI.FETCH.md5 =  6c7e7cfdd39c908f7ac619351c1c5c23
+FRIBIDI.FETCH.url     = https://download.handbrake.fr/handbrake/contrib/fribidi-0.19.7.tar.bz2
+FRIBIDI.FETCH.url    += https://fribidi.org/download/fribidi-0.19.7.tar.bz2
+FRIBIDI.FETCH.sha256  = 08222a6212bbc2276a2d55c3bf370109ae4a35b689acbc66571ad2a670595a8e
 
 ifeq (1-mingw,$(BUILD.cross)-$(BUILD.system))
     FRIBIDI.CONFIGURE.extra = --with-glib=no

diff --git a/contrib/harfbuzz/module.defs b/contrib/harfbuzz/module.defs
@@ -2,9 +2,9 @@ __deps__ := FONTCONFIG FREETYPE
 $(eval $(call import.MODULE.defs,HARFBUZZ,harfbuzz,$(__deps__)))
 $(eval $(call import.CONTRIB.defs,HARFBUZZ))
 
-HARFBUZZ.FETCH.url = https://download.handbrake.fr/handbrake/contrib/harfbuzz-1.3.0.tar.bz2
-HARFBUZZ.FETCH.url += https://www.freedesktop.org/software/harfbuzz/release/harfbuzz-1.3.0.tar.bz2
-HARFBUZZ.FETCH.md5 = a82d49ff67197bc3c96ea34b98880c52
+HARFBUZZ.FETCH.url     = https://download.handbrake.fr/handbrake/contrib/harfbuzz-1.3.0.tar.bz2
+HARFBUZZ.FETCH.url    += https://www.freedesktop.org/software/harfbuzz/release/harfbuzz-1.3.0.tar.bz2
+HARFBUZZ.FETCH.sha256  = b04be31633efee2cae1d62d46434587302554fa837224845a62565ec68a0334d
 
 # Tell configure where to find our versions of freetype and fontconfig
 HARFBUZZ.CONFIGURE.extra = \

diff --git a/contrib/jansson/module.defs b/contrib/jansson/module.defs
@@ -1,12 +1,12 @@
 $(eval $(call import.MODULE.defs,JANSSON,jansson))
 $(eval $(call import.CONTRIB.defs,JANSSON))
 
-JANSSON.FETCH.url =  https://download.handbrake.fr/handbrake/contrib/jansson-2.6.tar.bz2
-JANSSON.FETCH.url += http://www.digip.org/jansson/releases/jansson-2.6.tar.bz2
-JANSSON.FETCH.md5 =  c70a52488db623a26f7213c7c6b7c878
+JANSSON.FETCH.url     = https://download.handbrake.fr/handbrake/contrib/jansson-2.6.tar.bz2
+JANSSON.FETCH.url    += http://www.digip.org/jansson/releases/jansson-2.6.tar.bz2
+JANSSON.FETCH.sha256  = d2cc63ee7f6dcda6c9a8f0b558f94b8f25f048706b7cbd6a79d3e877b738cd4d
 
 # TODO: jansson >= 2.7
-#JANSSON.FETCH.url + http://www.digip.org/jansson/releases/jansson-2.7.tar.bz2
-#JANSSON.FETCH.md5 = ffac352f9c5f80a6ae8145d451af2c0e
+#JANSSON.FETCH.url    + http://www.digip.org/jansson/releases/jansson-2.7.tar.bz2
+#JANSSON.FETCH.sha256 = 459f2b7cf22fb676286723f26169a17cf111fbfb6f54e3dc2ec6b6f9f4a97bdc
 
 JANSSON.CONFIGURE.bootstrap = rm -fr aclocal.m4 autom4te.cache; mkdir m4; autoreconf -fiv;
diff --git a/contrib/lame/module.defs b/contrib/lame/module.defs
@@ -1,20 +1,20 @@
 $(eval $(call import.MODULE.defs,LAME,lame))
 $(eval $(call import.CONTRIB.defs,LAME))
 
-LAME.FETCH.url = https://download.handbrake.fr/handbrake/contrib/lame-3.98.tar.gz
-LAME.FETCH.md5 = 7036b52e792538fd665595d56b9e49a0
+LAME.FETCH.url    = https://download.handbrake.fr/handbrake/contrib/lame-3.98.tar.gz
+LAME.FETCH.sha256 = 40235e84dfe4760ad3f352590a64b7bda1502a386c97d06229df356426e37686
 LAME.EXTRACT.tarbase = lame
 
-ifneq (none,$(FFMPEG.GCC.g))
-	LAME.CONFIGURE.extra += --enable-debug
-endif
-
 # TODO: Upstream archive differs
-#LAME.FETCH.url = https://sourceforge.net/projects/lame/files/lame/3.98/lame-398.tar.gz
-#LAME.FETCH.md5 = f44b9f8e1b5d8835d0a77f9cc9cedd1c
+#LAME.FETCH.url    = https://sourceforge.net/projects/lame/files/lame/3.98/lame-398.tar.gz
+#LAME.FETCH.sha256 = 8396bcb425ddcbfb8027d5712fa8878a2257006ccbe3ac7a772e1652e43d19b1
 #LAME.FETCH.distfile  = lame-3.98.tar.gz
 #LAME.EXTRACT.tarbase = lame
 #
 # TODO: lame >= 3.99.5, tarbase unnecessary
-#LAME.FETCH.md5 = 84835b313d4a8b68f5349816d33e07ce
-#LAME.FETCH.url = https://sourceforge.net/projects/lame/files/lame/3.99/lame-3.99.5.tar.gz
+#LAME.FETCH.url    = https://sourceforge.net/projects/lame/files/lame/3.99/lame-3.99.5.tar.gz
+#LAME.FETCH.sha256 = 24346b4158e4af3bd9f2e194bb23eb473c75fb7377011523353196b19b9a23ff
+
+ifneq (none,$(FFMPEG.GCC.g))
+	LAME.CONFIGURE.extra += --enable-debug
+endif
diff --git a/contrib/libass/module.defs b/contrib/libass/module.defs
@@ -2,9 +2,9 @@ __deps__ := YASM FONTCONFIG FREETYPE FRIBIDI HARFBUZZ
 $(eval $(call import.MODULE.defs,LIBASS,libass,$(__deps__)))
 $(eval $(call import.CONTRIB.defs,LIBASS))
 
-LIBASS.FETCH.url = https://download.handbrake.fr/handbrake/contrib/libass-0.13.2.tar.gz
-LIBASS.FETCH.url += https://github.com/libass/libass/releases/download/0.13.2/libass-0.13.2.tar.gz
-LIBASS.FETCH.md5 = b4d82616bb18e8e954b18746a105a3b8
+LIBASS.FETCH.url     = https://download.handbrake.fr/handbrake/contrib/libass-0.13.2.tar.gz
+LIBASS.FETCH.url    += https://github.com/libass/libass/releases/download/0.13.2/libass-0.13.2.tar.gz
+LIBASS.FETCH.sha256  = 8baccf663553b62977b1c017d18b3879835da0ef79dc4d3b708f2566762f1d5e
 
 # Tell configure where to find our versions of freetype and fontconfig
 LIBASS.CONFIGURE.extra = \

diff --git a/contrib/libbluray/module.defs b/contrib/libbluray/module.defs
@@ -1,9 +1,9 @@
 $(eval $(call import.MODULE.defs,LIBBLURAY,libbluray,PKGCONFIG LIBXML2 FREETYPE))
 $(eval $(call import.CONTRIB.defs,LIBBLURAY))
 
-LIBBLURAY.FETCH.url =  https://download.handbrake.fr/handbrake/contrib/libbluray-0.9.3.tar.bz2
-LIBBLURAY.FETCH.url += https://download.videolan.org/pub/videolan/libbluray/0.9.3/libbluray-0.9.3.tar.bz2
-LIBBLURAY.FETCH.md5 =  c51fd34f933431559371be30b59cff51
+LIBBLURAY.FETCH.url     = https://download.handbrake.fr/handbrake/contrib/libbluray-0.9.3.tar.bz2
+LIBBLURAY.FETCH.url    += https://download.videolan.org/pub/videolan/libbluray/0.9.3/libbluray-0.9.3.tar.bz2
+LIBBLURAY.FETCH.sha256  = a6366614ec45484b51fe94fcd1975b3b8716f90f038a33b24d59978de3863ce0
 
 ifneq (max,$(LIBBLURAY.GCC.g))
 	LIBBLURAY.CONFIGURE.extra += --disable-debug

diff --git a/contrib/libdvdnav/module.defs b/contrib/libdvdnav/module.defs
@@ -1,13 +1,13 @@
 $(eval $(call import.MODULE.defs,LIBDVDNAV,libdvdnav,PKGCONFIG LIBDVDREAD))
 $(eval $(call import.CONTRIB.defs,LIBDVDNAV))
 
-LIBDVDNAV.FETCH.url =  https://download.handbrake.fr/handbrake/contrib/libdvdnav-5.0.1.tar.bz2
-LIBDVDNAV.FETCH.url += https://download.videolan.org/pub/videolan/libdvdnav/5.0.1/libdvdnav-5.0.1.tar.bz2
-LIBDVDNAV.FETCH.md5 =  81e30fb57eaf9f61aa6513a7bd85bd74
+LIBDVDNAV.FETCH.url     = https://download.handbrake.fr/handbrake/contrib/libdvdnav-5.0.1.tar.bz2
+LIBDVDNAV.FETCH.url    += https://download.videolan.org/pub/videolan/libdvdnav/5.0.1/libdvdnav-5.0.1.tar.bz2
+LIBDVDNAV.FETCH.sha256  = 72b1cb8266f163d4a1481b92c7b6c53e6dc9274d2a6befb08ffc351fe7a4a2a9
 
 # TODO: libdvdnav >= 5.0.3
-#LIBDVDNAV.FETCH.url = https://download.videolan.org/pub/videolan/libdvdnav/5.0.3/libdvdnav-5.0.3.tar.bz2
-#LIBDVDNAV.FETCH.md5 = e9ea4de3bd8f204e61301d407d09f033
+#LIBDVDNAV.FETCH.url    = https://download.videolan.org/pub/videolan/libdvdnav/5.0.3/libdvdnav-5.0.3.tar.bz2
+#LIBDVDNAV.FETCH.sha256 = 5097023e3d2b36944c763f1df707ee06b19dc639b2b68fb30113a5f2cbf60b6d
 
 LIBDVDNAV.CONFIGURE.bootstrap = rm -fr aclocal.m4 autom4te.cache configure; autoreconf -I m4 -fiv;
 

diff --git a/contrib/libdvdread/module.defs b/contrib/libdvdread/module.defs
@@ -1,12 +1,12 @@
 $(eval $(call import.MODULE.defs,LIBDVDREAD,libdvdread,PKGCONFIG))
 $(eval $(call import.CONTRIB.defs,LIBDVDREAD))
 
-LIBDVDREAD.FETCH.url = https://download.handbrake.fr/handbrake/contrib/libdvdread-5.0.0-6-gcb1ae87.tar.gz
-LIBDVDREAD.FETCH.md5 = 607a5dd41b0dd2f35433d6deac79b99e
+LIBDVDREAD.FETCH.url    = https://download.handbrake.fr/handbrake/contrib/libdvdread-5.0.0-6-gcb1ae87.tar.gz
+LIBDVDREAD.FETCH.sha256 = d2e4200c3c5d5f812892f9c14851c94e2f707d54e7328946c6397ac999f15f17
 
 # TODO: libdvdread >= 5.0.3
-#LIBDVDREAD.FETCH.url = https://download.videolan.org/pub/videolan/libdvdread/5.0.3/libdvdread-5.0.3.tar.bz2
-#LIBDVDREAD.FETCH.md5 = b7b7d2a782087ed2a913263087083715
+#LIBDVDREAD.FETCH.url    = https://download.videolan.org/pub/videolan/libdvdread/5.0.3/libdvdread-5.0.3.tar.bz2
+#LIBDVDREAD.FETCH.sha256 = 321cdf2dbdc83c96572bc583cd27d8c660ddb540ff16672ecb28607d018ed82b
 
 LIBDVDREAD.CONFIGURE.bootstrap = rm -fr aclocal.m4 autom4te.cache configure; autoreconf -I m4 -fiv;
 

diff --git a/contrib/libgnurx/module.defs b/contrib/libgnurx/module.defs
@@ -1,9 +1,9 @@
 $(eval $(call import.MODULE.defs,LIBGNURX,libgnurx))
 $(eval $(call import.CONTRIB.defs,LIBGNURX))
 
-LIBGNURX.FETCH.url =  https://download.handbrake.fr/handbrake/contrib/mingw-libgnurx-2.5.1-src.tar.gz
-LIBGNURX.FETCH.url += https://sourceforge.net/projects/mingw/files/Other/UserContributed/regex/mingw-regex-2.5.1/mingw-libgnurx-2.5.1-src.tar.gz
-LIBGNURX.FETCH.md5 =  35c8fed3101ca1f253e9b6b1966661f6
+LIBGNURX.FETCH.url     = https://download.handbrake.fr/handbrake/contrib/mingw-libgnurx-2.5.1-src.tar.gz
+LIBGNURX.FETCH.url    += https://sourceforge.net/projects/mingw/files/Other/UserContributed/regex/mingw-regex-2.5.1/mingw-libgnurx-2.5.1-src.tar.gz
+LIBGNURX.FETCH.sha256  = 7147b7f806ec3d007843b38e19f42a5b7c65894a57ffc297a76b0dcd5f675d76
 LIBGNURX.EXTRACT.tarbase = mingw-libgnurx-2.5.1
 
 LIBGNURX.CONFIGURE.env += AR="$(AR.exe)"

diff --git a/contrib/libiconv/module.defs b/contrib/libiconv/module.defs
@@ -1,9 +1,9 @@
 $(eval $(call import.MODULE.defs,LIBICONV,libiconv))
 $(eval $(call import.CONTRIB.defs,LIBICONV))
 
-LIBICONV.FETCH.url = https://download.handbrake.fr/handbrake/contrib/libiconv-1.14.tar.gz
-LIBICONV.FETCH.url += https://ftp.gnu.org/gnu/libiconv/libiconv-1.14.tar.gz
-LIBICONV.FETCH.md5 = e34509b1623cec449dfeb73d7ce9c6c6
+LIBICONV.FETCH.url     = https://download.handbrake.fr/handbrake/contrib/libiconv-1.14.tar.gz
+LIBICONV.FETCH.url    += https://ftp.gnu.org/gnu/libiconv/libiconv-1.14.tar.gz
+LIBICONV.FETCH.sha256  = 72b24ded17d687193c3366d0ebe7cde1e6b18f0df8c55438ac95be39e8a30613
 
 # this contrib will not build under MinGW with -std=gnu99
 ifeq (1-mingw,$(BUILD.cross)-$(BUILD.system))

diff --git a/contrib/libmfx/module.defs b/contrib/libmfx/module.defs
@@ -1,8 +1,8 @@
 $(eval $(call import.MODULE.defs,LIBMFX,libmfx))
 $(eval $(call import.CONTRIB.defs,LIBMFX))
 
-LIBMFX.FETCH.url = https://download.handbrake.fr/contrib/mfx_dispatch-9f4a84d7.tar.gz
-LIBMFX.FETCH.md5 = 694058b83b43b39b7e5b5fc38dbe2b88
+LIBMFX.FETCH.url    = https://download.handbrake.fr/contrib/mfx_dispatch-9f4a84d7.tar.gz
+LIBMFX.FETCH.sha256 = e07d1024e86998ac3992620f5db0f999af51cc700f7de90da2ebbe1e8a3b6efe
 
 LIBMFX.CONFIGURE.bootstrap = rm -fr aclocal.m4 autom4te.cache; autoreconf -fiv;
 

diff --git a/contrib/libogg/module.defs b/contrib/libogg/module.defs
@@ -1,14 +1,14 @@
 $(eval $(call import.MODULE.defs,LIBOGG,libogg))
 $(eval $(call import.CONTRIB.defs,LIBOGG))
 
-LIBOGG.FETCH.url =  https://download.handbrake.fr/handbrake/contrib/libogg-1.3.0.tar.gz
-LIBOGG.FETCH.url += http://downloads.xiph.org/releases/ogg/libogg-1.3.0.tar.gz
-LIBOGG.FETCH.md5 =  0a7eb40b86ac050db3a789ab65fe21c2
+LIBOGG.FETCH.url     = https://download.handbrake.fr/handbrake/contrib/libogg-1.3.0.tar.gz
+LIBOGG.FETCH.url    += http://downloads.xiph.org/releases/ogg/libogg-1.3.0.tar.gz
+LIBOGG.FETCH.sha256  = a8de807631014615549d2356fd36641833b8288221cea214f8a72750efe93780
 LIBOGG.EXTRACT.tarbase = libogg-1.3.0
 
 # TODO: libogg >= 1.3.2, tarbase unnecessary
 #LIBOGG.FETCH.url = http://downloads.xiph.org/releases/ogg/libogg-1.3.2.tar.gz
-#LIBOGG.FETCH.md5 = b72e1a1dbadff3248e4ed62a4177e937
+#LIBOGG.FETCH.sha256 = e19ee34711d7af328cb26287f4137e70630e7261b17cbe3cd41011d73a654692
 
 LIBOGG.CONFIGURE.extra = --disable-sdl
 

diff --git a/contrib/libopus/module.defs b/contrib/libopus/module.defs
@@ -1,9 +1,9 @@
 $(eval $(call import.MODULE.defs,LIBOPUS,libopus))
 $(eval $(call import.CONTRIB.defs,LIBOPUS))
 
-LIBOPUS.FETCH.url = https://download.handbrake.fr/contrib/opus-1.1.3.tar.gz
-LIBOPUS.FETCH.url += http://downloads.xiph.org/releases/opus/opus-1.1.3.tar.gz
-LIBOPUS.FETCH.md5 = 32bbb6b557fe1b6066adc0ae1f08b629
+LIBOPUS.FETCH.url     = https://download.handbrake.fr/contrib/opus-1.1.3.tar.gz
+LIBOPUS.FETCH.url    += http://downloads.xiph.org/releases/opus/opus-1.1.3.tar.gz
+LIBOPUS.FETCH.sha256  = 58b6fe802e7e30182e95d0cde890c0ace40b6f125cffc50635f0ad2eef69b633
 
 LIBOPUS.CONFIGURE.shared = --enable-shared=no
 LIBOPUS.CONFIGURE.extra = --disable-doc --disable-extra-programs

diff --git a/contrib/libsamplerate/module.defs b/contrib/libsamplerate/module.defs
@@ -1,8 +1,8 @@
 $(eval $(call import.MODULE.defs,LIBSAMPLERATE,libsamplerate))
 $(eval $(call import.CONTRIB.defs,LIBSAMPLERATE))
 
-LIBSAMPLERATE.FETCH.url = https://download.handbrake.fr/handbrake/contrib/libsamplerate-0.1.4.tar.gz
-LIBSAMPLERATE.FETCH.md5 = 69ec6c05f487458f688dda8f3e722e5d
+LIBSAMPLERATE.FETCH.url    = https://download.handbrake.fr/handbrake/contrib/libsamplerate-0.1.4.tar.gz
+LIBSAMPLERATE.FETCH.sha256 = 4b4af3ecaee05c8875a9b113c6a2f816f06f283fb882914e57b21c0b08b67b75
 LIBSAMPLERATE.EXTRACT.tarbase = libsamplerate
 
 # TODO: libsamplerate >= 0.1.8, tarbase unnecessary

diff --git a/contrib/libtheora/module.defs b/contrib/libtheora/module.defs
@@ -1,13 +1,13 @@
 $(eval $(call import.MODULE.defs,LIBTHEORA,libtheora,LIBOGG LIBVORBIS))
 $(eval $(call import.CONTRIB.defs,LIBTHEORA))
 
-LIBTHEORA.FETCH.url =  https://download.handbrake.fr/handbrake/contrib/libtheora-1.1.0.tar.bz2
-LIBTHEORA.FETCH.url += http://downloads.xiph.org/releases/theora/libtheora-1.1.0.tar.bz2
-LIBTHEORA.FETCH.md5 =  d0f83cf7f13e2b3bd068a858ca1398ad
+LIBTHEORA.FETCH.url     = https://download.handbrake.fr/handbrake/contrib/libtheora-1.1.0.tar.bz2
+LIBTHEORA.FETCH.url    += http://downloads.xiph.org/releases/theora/libtheora-1.1.0.tar.bz2
+LIBTHEORA.FETCH.sha256  = 74be9fe9f85d18c45bdcbb018cebf12c74e2234aeecb4d4c4cb92d80bdd287e2
 
 # TODO: libtheora >= 1.1.1
-#LIBTHEORA.FETCH.url = http://downloads.xiph.org/releases/theora/libtheora-1.1.1.tar.bz2
-#LIBTHEORA.FETCH.md5 = 292ab65cedd5021d6b7ddd117e07cd8e
+#LIBTHEORA.FETCH.url    = http://downloads.xiph.org/releases/theora/libtheora-1.1.1.tar.bz2
+#LIBTHEORA.FETCH.sha256 = b6ae1ee2fa3d42ac489287d3ec34c5885730b1296f0801ae577a35193d3affbc
 
 LIBTHEORA.CONFIGURE.extra = \
     --disable-examples \

diff --git a/contrib/libtool/module.defs b/contrib/libtool/module.defs
@@ -1,10 +1,10 @@
 $(eval $(call import.MODULE.defs,LIBTOOL,libtool,AUTOCONF AUTOMAKE PKGCONFIG))
 $(eval $(call import.CONTRIB.defs,LIBTOOL))
 
-LIBTOOL.FETCH.url =  https://download.handbrake.fr/handbrake/contrib/libtool-2.4.2.tar.gz
-LIBTOOL.FETCH.url += https://ftp.gnu.org/gnu/libtool/libtool-2.4.2.tar.gz
-LIBTOOL.FETCH.md5 =  d2f3b7d4627e69e13514a40e72a24d50
+LIBTOOL.FETCH.url     = https://download.handbrake.fr/handbrake/contrib/libtool-2.4.2.tar.gz
+LIBTOOL.FETCH.url    += https://ftp.gnu.org/gnu/libtool/libtool-2.4.2.tar.gz
+LIBTOOL.FETCH.sha256  = b38de44862a987293cd3d8dfae1c409d514b6c4e794ebc93648febf9afc38918
 
 # TODO: libtool >= 2.4.6
-#LIBTOOL.FETCH.url = https://ftp.gnu.org/gnu/libtool/libtool-2.4.6.tar.gz
-#LIBTOOL.FETCH.md5 = addf44b646ddb4e3919805aa88fa7c5e
+#LIBTOOL.FETCH.url    = https://ftp.gnu.org/gnu/libtool/libtool-2.4.6.tar.gz
+#LIBTOOL.FETCH.sha256 = e3bd4d5d3d025a36c21dd6af7ea818a2afcd4dfc1ea5a17b39d7854bcd0c06e3