[ https://issues.apache.org/jira/browse/LUCENE-7935?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16426517#comment-16426517 ]
Uwe Schindler edited comment on LUCENE-7935 at 4/5/18 6:43 AM: --------------------------------------------------------------- Thanks! {quote} bq. The ASF page on publishing Maven artifacts (http://www.apache.org/dev/publishing-maven-artifacts.html) says we don't need to provide MD5 or SHA1 files: Nexus will create MD5 and SHA1 checksums on the fly {quote} I think there is also a problem on top: the maven-ant-plugin seems to generate the checksums when executing an "uploading" (in our case to local folder, see "artifact:deploy" in the build log). As this plugin is no longer maintained (or is it?), we can't publish the new hashes anyways. I also think that Maven still requires md5 files in its infrastructure (at least they require them at sonatype when you close the repository). E.g., the repo software uses them as E-Tag header during HTTP download to control cache behaviour. was (Author: thetaphi): Thanks! {quote} bq. The ASF page on publishing Maven artifacts (http://www.apache.org/dev/publishing-maven-artifacts.html) says we don't need to provide MD5 or SHA1 files: Nexus will create MD5 and SHA1 checksums on the fly {quote} I think there is also a problem on top: the maven-ant-plugin seems to generate the checksums when executing an "uploading" (in our case to local folder, see "artifact:deploy" in the build log). As this plugin is no longer maintained (or is it?), we can't publish the new hashes anyways. I also think that Maven still requires md5 files in its infrastructure (at least they require them at sonatype when you close the repository). > Release .sha512 hash files with our artifacts > --------------------------------------------- > > Key: LUCENE-7935 > URL: https://issues.apache.org/jira/browse/LUCENE-7935 > Project: Lucene - Core > Issue Type: Improvement > Components: general/build > Reporter: Jan Høydahl > Assignee: Jan Høydahl > Priority: Major > Fix For: 7.4, master (8.0) > > Attachments: LUCENE-7935.patch, LUCENE-7935.patch, > LUCENE-7935_smokefail.patch > > > Currently we are only required to release {{.md5}} hashes with our artifacts, > and we also include {{.sha1}} files. It is expected that {{.sha512}} will be > required in the future (see > https://www.apache.org/dev/release-signing.html#sha1), so why not start > generating them right away? -- This message was sent by Atlassian JIRA (v7.6.3#76005) --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org For additional commands, e-mail: dev-h...@lucene.apache.org