[
https://issues.apache.org/jira/browse/CONNECTORS-926?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13971838#comment-13971838
]
Ahmet Arslan commented on CONNECTORS-926:
-----------------------------------------
Hi Karl,
Different programs produce different output format for md5 and sha. Since
OpenPGP is a must for .asc why not use its md5 and sha format?
Regarding suffix, http://www.apache.org/dev/release-signing.html#basic-facts
says
bq. An SHA checksum should also be created and *must* be suffixed .sha.
> Release signatures generated on linux machines are of the incorrect format
> --------------------------------------------------------------------------
>
> Key: CONNECTORS-926
> URL: https://issues.apache.org/jira/browse/CONNECTORS-926
> Project: ManifoldCF
> Issue Type: Bug
> Components: Build
> Affects Versions: ManifoldCF 1.6
> Reporter: Karl Wright
> Assignee: Ahmet Arslan
> Fix For: ManifoldCF 1.6
>
>
> Hi Ahmet,
> Looked at the release signatures for MCF 1.6 RC1, and found some differences
> over what the "correct" format is supposed to be.
> Correct form MD5 example:
> A14D8A01BAE4730A9557C35957EBB688 *apache-manifoldcf-1.4.1-bin.tar.gz
> Incorrect form:
> apache-manifoldcf-1.6-lib.zip: 2B 93 33 55 C1 68 09 0E 41 D4 49 55 90 D6 07
> A4
> Correct form SHA example:
> 07E4051DD8D3FAF4005AFEC99D9E79864F591ABB *apache-manifoldcf-1.5.1-src.zip
> Incorrect form:
> apache-manifoldcf-1.6-src.tar.gz: 0B55AB19 04E14F4D 8BF05B13 E98A60DD CED81706
> A09A0C6E 4AAFF17D 521B581C 48F6C35C F5FC6175
> 36D0E4C9 BA8344D9 77E8053B 0E821114 B74B637E
> 53D07838
> Please also note that the download page has an incorrect URL for the SHA
> signature; it should point to .sha1, not .sha, which is why it gets a "not
> found" error. I will fix that shortly.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
