Re: Maven artifacts SHA256 | SHA512 checksums

2021-01-29 Thread Konrad Windszus
Hi Petr, this should be feasible with checksum-maven-plugin in the upcoming version (https://issues.apache.org/jira/browse/MPOM-244?focusedCommentId=17255937=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel#comment-17255937). Konrad

Re: Maven artifacts SHA256 | SHA512 checksums

2021-01-29 Thread Elliotte Rusty Harold
This sounds like a very worthwhile feature. There's even a remote chance I could talk someone at work into funding this effort since it fits in with some other projects we have going. Can you file an issue or issues in the relevant component(s) On Fri, Jan 29, 2021 at 8:04 AM Petr Ivanov wrote:

Re: Maven artifacts SHA256 | SHA512 checksums

2021-01-29 Thread Paul Hammant
I don't think so - it's tied to SHA1 presently and would require updates to multiple plugins. I mean for your own DAV-style repository you could ALSO publish SHA256s, but there's no verification cycle as deps are pulled into a build client-side that'd use them.

Maven artifacts SHA256 | SHA512 checksums

2021-01-29 Thread Petr Ivanov
Hi all! Had no luck in asking in USER list, trying fellow developers. Is there a way to configure maven project in such a way, that it will generate and deploy SHA256 | SHA512 checksums with `mvn deploy` command? I've tried maven-gpg-plugin and maven-checksum-plugin in all variations, but