Author: nacx
Date: Thu Sep 7 11:01:19 2017
New Revision: 21506
Log:
Include an SHA-512 checksum as per new ASF policy on released artifacts
Modified:
dev/jclouds/fetch_jclouds_rc.sh
dev/jclouds/verify_jclouds_rc.sh
Modified: dev/jclouds/fetch_jclouds_rc.sh
==============================================================================
--- dev/jclouds/fetch_jclouds_rc.sh (original)
+++ dev/jclouds/fetch_jclouds_rc.sh Thu Sep 7 11:01:19 2017
@@ -33,4 +33,6 @@ for a in ${REPO}/org/apache/jclouds/jclo
wget -P ${DL_DIR} --no-check-certificate ${a}{,.asc,.md5,.sha1};
+ FILE=`basename ${a}`
+ shasum -a 512 ${DL_DIR}/${FILE} | awk '{print $1}'
>${DL_DIR}/${FILE}.sha512
done
Modified: dev/jclouds/verify_jclouds_rc.sh
==============================================================================
--- dev/jclouds/verify_jclouds_rc.sh (original)
+++ dev/jclouds/verify_jclouds_rc.sh Thu Sep 7 11:01:19 2017
@@ -27,14 +27,6 @@ else
MD5SUM=/usr/bin/md5sum
fi
-if [ -e /sbin/sha1 ]; then
- SHA1SUM=/sbin/sha1
-elif [ -e /usr/bin/shasum ]; then
- SHA1SUM=/usr/bin/shasum
-else
- SHA1SUM=/usr/bin/sha1sum
-fi
-
curl http://www.apache.org/dist/jclouds/KEYS | gpg --import
svn co https://dist.apache.org/repos/dist/dev/jclouds/$RELEASE
@@ -46,10 +38,14 @@ for tarball in `ls *.tar.gz`; do
ACTUAL=`$MD5SUM ${tarball} | awk '{print $1}'`
EXPECTED=`cat ${tarball}.md5`
[ "$ACTUAL" == "${EXPECTED}" ]
- # Verify sha1sum
- ACTUAL=`$SHA1SUM ${tarball} | awk '{print $1}'`
+ # Verify SHA-1 sum (legacy)
+ ACTUAL=`shasum -a 1 ${tarball} | awk '{print $1}'`
EXPECTED=`cat ${tarball}.sha1`
[ "$ACTUAL" == "${EXPECTED}" ]
+ # Verify SHA-512 sum
+ ACTUAL=`shasum -a 512 ${tarball} | awk '{print $1}'`
+ EXPECTED=`cat ${tarball}.sha512`
+ [ "$ACTUAL" == "${EXPECTED}" ]
# verify signature
gpg --verify ${tarball}.asc ${tarball};
# Untar
