native/yasm: use github release & cross/libsodium: update digests

[publicarray]

See: #4951 (comment)

Just in-case the cert expires again

Checklist

• native build

[th0ma7]

Why is it failing? This seems like a trivial PR...

EDIT: That's interesting:

===>  Verifying files for libsodium
===>    Checking sha1sum of file libsodium-1.0.18-stable.tar.gz
===>      Wrong sha1sum for file libsodium-1.0.18-stable.tar.gz
===>      Renamed as libsodium-1.0.18-stable.tar.gz.wrong
===>      Download cookie removed to trigger the download again

So it ends-up that a make digests does solve the issue. Tested and updated as of today. Too bad they keep re-updating this stable version instead of publishing a x.19...

[th0ma7]

@publicarray I suggest we simply merge this and start using github by default. Are you ok with this?

[publicarray]

I used minisign to verify the signature of libsodium 👍

[publicarray]

@th0ma7 Thank you!

[publicarray]

Arch uses libsodium-1.0.18.tar.gz not libsodium-1.0.18-stable.tar.gz. maybe that is part of the problem we are using the wrong file?. https://github.com/archlinux/svntogit-packages/blob/packages/libsodium/trunk/PKGBUILD

[th0ma7]

I've switched to -stable a few weeks ago due to build issues elsewhere in the python dreamworld :)

[publicarray]

jedisct1/libsodium#1124 (comment)

[publicarray]

Based on he's response I think we should be using libsodium-1.0.18.tar.gz