Is this vmod deprecated / stale?

[musabshak]

https://varnish-cache.org/vmods/ lists this as a "stale" vmod. What does that mean? Is this vmod expected to work with Varnish 7.6.1?

[hermunn]

This VMOD is not under active development, but it should work with newer versions versions of Varnish, either directly or with minor modifications.

The main problem might be that this VMOD, digest , supports a lot of different algorithms, and mhash (which we link to) is not distributed with all modern operating systems, so compiling it might not work out of the box. Fixing this will require a significant amount of work, only to support algorithms which are insecure, and we do not plan to do this.

You probably want to look into other VMODs providing similar capabilities, for two reasons:

• It is always a good idea to run code which is under active development.
• This VMOD has a weakness in the API, as all the functions take strings as arguments. This means that converting a blob (which you might want to checksum) to a string, and then checksum the string, will not work well, simply because any null bytes in the blob will cause the checksum to be calculated from the bytes prior to the first null byte in the blob.

I will add this information, or something to the same effect, to the README file, to make it more visible.