[
https://issues.apache.org/jira/browse/CONNECTORS-926?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13972045#comment-13972045
]
Karl Wright edited comment on CONNECTORS-926 at 4/16/14 10:41 PM:
------------------------------------------------------------------
Hi Ahmet,
The closer page refers to pgp as the verification utility, which is why I
mentioned it. If you go to manifoldcf.apache.org and go to the download page,
and click the download button, there is a "verify your downloads" link that
sends you to that page. It does NOT send you to the cloudstack page, so that
is immaterial for ManifoldCF, unless we want our own download infrastructure.
Therefore, anything you come up with that is consistent with the closer page,
is fine with me. But if you look at the instructions on the closer page, it
does not appear to be consistent (to me) to using the gpg verification for md5
and sha signatures. Maybe I am missing something?
was (Author: [email protected]):
Hi Ahmet,
The closer page refers to pgp as the verification utility, which is why I
mentioned it. If you go to manifoldcf.apache.org and go to the download page,
and click the download button, there is a "verify your downloads" link that
sends you to that page. It does NOT send you to the cloudstack page, so that
is immaterial for ManifoldCF, unless we want our own download infrastructure.
> Release signatures generated on linux machines are of the incorrect format
> --------------------------------------------------------------------------
>
> Key: CONNECTORS-926
> URL: https://issues.apache.org/jira/browse/CONNECTORS-926
> Project: ManifoldCF
> Issue Type: Bug
> Components: Build
> Affects Versions: ManifoldCF 1.6
> Reporter: Karl Wright
> Assignee: Ahmet Arslan
> Fix For: ManifoldCF 1.6
>
>
> Hi Ahmet,
> Looked at the release signatures for MCF 1.6 RC1, and found some differences
> over what the "correct" format is supposed to be.
> Correct form MD5 example:
> A14D8A01BAE4730A9557C35957EBB688 *apache-manifoldcf-1.4.1-bin.tar.gz
> Incorrect form:
> apache-manifoldcf-1.6-lib.zip: 2B 93 33 55 C1 68 09 0E 41 D4 49 55 90 D6 07
> A4
> Correct form SHA example:
> 07E4051DD8D3FAF4005AFEC99D9E79864F591ABB *apache-manifoldcf-1.5.1-src.zip
> Incorrect form:
> apache-manifoldcf-1.6-src.tar.gz: 0B55AB19 04E14F4D 8BF05B13 E98A60DD CED81706
> A09A0C6E 4AAFF17D 521B581C 48F6C35C F5FC6175
> 36D0E4C9 BA8344D9 77E8053B 0E821114 B74B637E
> 53D07838
> Please also note that the download page has an incorrect URL for the SHA
> signature; it should point to .sha1, not .sha, which is why it gets a "not
> found" error. I will fix that shortly.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
