> On May 23, 2020, at 8:44 AM, Emmanuel Lécharny <[email protected]> wrote: > > Another blunder :/ > > The hashes *must* be >= SHA-256. MD5 and SHA1 are not anymore valid. > > Can you generate the hashes and put them on > https://repository.apache.org/content/repositories/orgapachedirectory-1191/org/apache/directory/fortress/fortress-core/2.0.5/ > ? > > Thanks ! > > (that means you'll have to fix the way those hashes are generated when > releasing).
Hi Emmanuel, We’re talking about what gets uploaded to maven repo (automatically). This will require changing the pom? Also, didn’t we cover this last time? http://mail-archives.apache.org/mod_mbox/directory-dev/201912.mbox/%[email protected]%3e As for what gets uploaded to apache dist, they will be (are) signed properly: https://dist.apache.org/repos/dist/dev/directory/fortress/2.0.5/ Thanks — Shawn --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
