Thank you for the hint Yoav!
I really appreciate your help!
Cheers
Federico

2012/5/28 Yoav Landman <[email protected]>

> If you trust the specific file and verified its content, the best would be
> to do a one-off fix of the bad checksum manually by clicking the "Fix
> Checksum" button in the tree browser, rather than setting a permissive
> policy globally on the repository, which should be the last resort (if you
> will agree to trust anything coming from that repo).
>
> On Mon, May 28, 2012 at 4:53 PM, Federico Paolantoni <
> [email protected]> wrote:
>
>> I suppose that  repo.opengeo.org has a broken checksum value:
>>
>> federico@CIO311:~$ wget -c
>> http://repo.opengeo.org/org/beanshell/bsh/2.1b5/bsh-2.1b5.pom
>> --2012-05-28 15:47:56--
>> http://repo.opengeo.org/org/beanshell/bsh/2.1b5/bsh-2.1b5.pom
>> Risoluzione di repo.opengeo.org (repo.opengeo.org)... 173.236.65.86
>> Connessione a repo.opengeo.org (repo.opengeo.org)|173.236.65.86|:80...
>> connesso.
>> Richiesta HTTP inviata, in attesa di risposta... 200 OK
>> Lunghezza: 460 [text/plain]
>> Salvataggio in: "bsh-2.1b5.pom"
>>
>> 100%[======================================>] 460         --.-K/s   in 0s
>>
>> 2012-05-28 15:47:56 (27,9 MB/s) - "bsh-2.1b5.pom" salvato [460/460]
>>
>> federico@CIO311:~$ md5sum bsh-2.1b5.pom
>> 5a9277846d9eb92a5607cb70e2b23db2  bsh-2.1b5.pom
>>
>> So, the best checksum policy in this case is?
>>
>> (3) Ignore and generate: Artifactory will locally generate a checksum for
>> both bad or
>> missing remote checksum. Remote resource retrieval will never fail, but
>> integrity might
>> be compromised.
>>
>> OR
>>
>> (4) Pass-thru: Artifactory will store and pass-thorugh all remote
>> checksums including
>> bad ones and will locally generate a checksum for a missing remote
>> checksum cannot be
>> found. Remote resource retrieval will never fail, but integrity might be
>> compromised and
>> client-side checksum validation (such as the one done by Maven) will fail.
>>
>>
>> Thank you
>> Federico
>>
>>
>> ------------------------------------------------------------------------------
>> Live Security Virtual Conference
>> Exclusive live event will cover all the ways today's security and
>> threat landscape has changed and how IT managers can respond. Discussions
>> will include endpoint security, mobile security and the latest in malware
>> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
>> _______________________________________________
>> Artifactory-users mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/artifactory-users
>>
>>
>
>
> ------------------------------------------------------------------------------
> Live Security Virtual Conference
> Exclusive live event will cover all the ways today's security and
> threat landscape has changed and how IT managers can respond. Discussions
> will include endpoint security, mobile security and the latest in malware
> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
> _______________________________________________
> Artifactory-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/artifactory-users
>
>
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Artifactory-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/artifactory-users

Reply via email to