Minor issue: the md5 and sha1 files are not a format I expected. The values are
correct, but I'm used to seeing no spaces and all lowercase. I see other Apache
projects use the lowercase no-space format too. E.g.
$ md5sum allura-1.0.0.tar.gz
d1dc283fd8e0f86e30bac3845d4fe036 allura-1.0.0.tar.gz
$ cat allura-1.0.0.tar.gz.md5
allura-1.0.0.tar.gz: D1 DC 28 3F D8 E0 F8 6E 30 BA C3 84 5D 4F E0 36
$ sha1sum allura-1.0.0.tar.gz
25b32dd7e98510dbb9f82dab1f1c74b5d7048558 allura-1.0.0.tar.gz
$ cat allura-1.0.0.tar.gz.sha1
allura-1.0.0.tar.gz: 25B3 2DD7 E985 10DB B9F8 2DAB 1F1C 74B5 D704 8558
$ sha512sum allura-1.0.0.tar.gz
7c5858aa83b919976ed2ae5e09733fe36bbf0201d474d8e49af32fd7572dc40b4445da2f24135a135922d3ef84a0839c14fd610a6709ee2df7b009003891f084
allura-1.0.0.tar.gz
$ cat allura-1.0.0.tar.gz.sha512
allura-1.0.0.tar.gz: 7C5858AA 83B91997 6ED2AE5E 09733FE3 6BBF0201 D474D8E4
9AF32FD7 572DC40B 4445DA2F 24135A13 5922D3EF 84A0839C
14FD610A 6709EE2D F7B00900 3891F084
On 8/13/13 5:50 PM, Cory Johns wrote:
> And SHA1 at:
>
> https://dist.apache.org/repos/dist/dev/incubator/allura/allura-1.0.0.tar.gz.sha1
>
>
> On Tue, Aug 13, 2013 at 5:35 PM, Cory Johns <cjo...@slashdotmedia.com>wrote:
>
>> Yes, you're right, the signature is at:
>> https://dist.apache.org/repos/dist/dev/incubator/allura/allura-1.0.0.tar.gz.asc
>>
>> I'm not sure how I typo'd that.
>>
>> I had assumed the signature was sufficient, but I went ahead and added
>> both MD5 and SHA512 at:
>>
>>
>> https://dist.apache.org/repos/dist/dev/incubator/allura/allura-1.0.0.tar.gz.md5
>>
>> https://dist.apache.org/repos/dist/dev/incubator/allura/allura-1.0.0.tar.gz.sha512
>>
>>
>> On Tue, Aug 13, 2013 at 5:07 PM, Dave Brondsema <
>> dbronds...@slashdotmedia.com> wrote:
>>
>>> On Tue, Aug 13, 2013 at 1:16 PM, Cory Johns <cjo...@slashdotmedia.com
>>>> wrote:
>>>
>>>> The first candidate for initial Allura Incubator release is up.
>>>>
>>>> * File:
>>>>
>>>>
>>> https://dist.apache.org/repos/dist/dev/incubator/allura//allura-1.0.0.tar.gz
>>>> * Sig:
>>>>
>>>>
>>> https://dist.apache.org/repos/dist/dev/incubator/allura//allura-1.0.0.tar.asc
>>>>
>>>
>>>
>>> https://dist.apache.org/repos/dist/dev/incubator/allura/allura-1.0.0.tar.gz.ascis
>>> the correct URL
>>>
>>>
>>>> * KEYS file:
>>>> https://dist.apache.org/repos/dist/release/incubator/allura/KEYS
>>>> * Tag (asf_release_1.0.0):
>>>>
>>>>
>>> https://git-wip-us.apache.org/repos/asf?p=incubator-allura.git;a=shortlog;h=refs/tags/asf_release_1.0.0
>>>>
>>>> Once this is voted and approved by us, we'll put it up for vote on
>>>> gene...@incubator.apache.org for general approval as our first official
>>>> Allura incubator release.
>>>>
>>>
>>>
>>> I think we'll need a checksum file to go along with the tarball too.
>>> Looks
>>> like some projects have just .md5 and others also have .sha1 and .sha512
>>> as
>>> well. Just md5 would be my preference.
>>>
>>> Do we need a Changelog/news file in the release? It would be nice, but I
>>> don't see it as a blocker unless policy requires it.
>>>
>>>
>>>
>>> --
>>> Dave Brondsema
>>> Principal Software Engineer - sourceforge.net
>>> Dice Holdings, Inc.
>>>
>>
>>
>
--
Dave Brondsema : d...@brondsema.net
http://www.brondsema.net : personal
http://www.splike.com : programming
<><
