[ 
https://issues.apache.org/jira/browse/CASSANDRA-14970?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17024728#comment-17024728
 ] 

Michael Shuler commented on CASSANDRA-14970:
--------------------------------------------

Patches above for 2.2, 3.0, 3.11, and trunk look good to me on {{ant 
artifacts}} tests for each branch.
I did also try to build 2.1 and the build currently fails, due to the old http 
URLs in build.xml and build.properties.default now being disabled. There was 
someone on slack with the same problem, so I added a 2.1 backport patch to 
CASSANDRA-15137. With that patch applied to the {{cassandra-2.1}} branch and 
the 2.1 patch above on top, I did not get the desired .sha256 & .sha512 files 
created when building the artifacts for some reason. That can probably be 
worked on later, if needed.

> New releases must supply SHA-256 and/or SHA-512 checksums
> ---------------------------------------------------------
>
>                 Key: CASSANDRA-14970
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-14970
>             Project: Cassandra
>          Issue Type: Bug
>          Components: Packaging
>            Reporter: Michael Shuler
>            Assignee: Michael Semb Wever
>            Priority: Urgent
>             Fix For: 2.2.16, 3.0.20, 3.11.6, 4.0
>
>         Attachments: 
> 0001-Update-downloads-for-sha256-sha512-checksum-files.patch, 
> 0001-Update-release-checksum-algorithms-to-SHA-256-SHA-512.patch, 
> ant-publish-checksum-fail.jpg, build_cassandra-2.1.png, build_trunk.png, 
> cassandra-2.1_14970_updated.patch
>
>
> Release policy was updated around 9/2018 to state:
> "For new releases, PMCs MUST supply SHA-256 and/or SHA-512; and SHOULD NOT 
> supply MD5 or SHA-1. Existing releases do not need to be changed."
> build.xml needs to be updated from MD5 & SHA-1 to, at least, SHA-256 or both. 
> cassandra-builds/cassandra-release scripts need to be updated to work with 
> the new checksum files.
> http://www.apache.org/dev/release-distribution#sigs-and-sums



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org
For additional commands, e-mail: commits-h...@cassandra.apache.org

Reply via email to