There is a maven plugin to generate and upload the mda / sha files for each generated jar. It may be easier to use it for the next releases. Also, running RAT to check that all the needed source files have a proper ASF license is a good thing. See http://svn.apache.org/repos/asf/servicemix/smx4/runtime/trunk/pom.xmlfor an example of configuring rat, gpg signing, etc...
On Dec 16, 2007 4:58 PM, Richard S. Hall <[EMAIL PROTECTED]> wrote: > A couple of questions. I don't know if it is just me, but I can verify > md5 and sha1 sums, however I must do it manually as opposed to just doing: > > md5sum -c filename.md5 > > For me, md5sum and sha1sum are expecting a file in the form of: > > b8596e4574cdb9192a5483cb0fb805f9d2e26c3d maven-scr-plugin-1.0.0.jar > > But the generated files only contain the sum, not the file name. It > certainly would be nicer if the generated files for md5s and sha1 were > in the correct format. > > Also, I notice that the POM depends on com.thoughtworks.qdox, but I > don't see any mention of the copyrights in the NOTICE file. > > -> richard > > > > Carsten Ziegeler wrote: > > Hi, > > > > since the last release of the maven-scr-plugin we fixed several bugs and > > did some enhancements. So I think its time to do a new release of the > > current version - it seems to be very stable and more or less feature > > complete for a 1.0.0 release. > > > > I've compiled the release candidate and put it up here: > > > > http://people.apache.org/~cziegeler/releases/felix/maven-scr-plugin/<http://people.apache.org/%7Ecziegeler/releases/felix/maven-scr-plugin/> > > > > The KEYS file for verifying the signature is also in this directory. > > > > So, please check the release and cast your votes. > > > > Thanks > > Carsten > > > -- Cheers, Guillaume Nodet ------------------------ Blog: http://gnodet.blogspot.com/
