> The SHA1 provided in the mail is exclusively for the README.md file.

That SHA1 confused me too.

The SHA512 for the release artefact seems quite essential. Somebody
changing the artefact can easily update the hash too, but if the hash
is publicly listed in the email then it's almost impossible to change
the artefact so that the hash remains the same...

--emi

http://coolbeans.xyz/ - CoolBeans: An IDE for Java, JavaEE, PHP and more!

On Tue, Dec 18, 2018 at 6:26 PM Laszlo Kishalmi
<[email protected]> wrote:
>
> Dear Tushar,
>
> The release does not come with SHA1 checksums. We are using SHA512 only
> and the checksum files are next to their corresponding zip files.
>
> The SHA1 provided in the mail is exclusively for the README.md file.
>
>
> On 12/17/18 11:57 PM, John McDonnell wrote:
> > Hi,
> >
> > Kicking off a Discussion thread for the new vote thread :)
> >
> > When Im checking the Licence file I noticed 2 possible issues:
> > 1. Near the end of the file it has:
> > platform/o.n.swing.plaf/src/org/netbeans/swing/plaf/util/SmoothScrollPaneUI.java
> >                                                  Apache-2.0
> > If a file is Apache Licensed it shouldnt be contained in this list, correct?
> >
> > 2. At the end of the file it contains:
> > "Notes
> > -----
> > [  1] Copyright (c) 2008, 2009 Sun Microsystems. All rights reserved.
> >
> >              Contributors:
> >              Linda DeMichiel - Java Persistence 2.0, Version 2.0 (October 1,
> > 2009)
> >              Specification available from 
> > http://jcp.org/en/jsr/detail?id=317
> >
> > [  2] Copyright (c) 2008  - 2013 Oracle Corporation. All rights reserved.
> >
> >              Contributors:
> >              Linda DeMichiel - Java Persistence 2.1, Version 2.1 (February
> > 4, 2013)
> >              Specification available from 
> > http://jcp.org/en/jsr/detail?id=338
> >
> > [  3] Copyright (c) 1998, 2010 Oracle. All rights reserved.
> >
> > Contributors:
> > dmccann - December 22/2010 - 2.3 - Initial implementation
> >
> > "
> >
> > Is this correct for the Licence file?
> >
> > Other that that I see no issues, I was able to verify the keys, and build
> > the source, so when I get clarification on those 2 issues I'm willing to
> > vote.
> >
> > Regards
> >
> > John
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>
> For further information about the NetBeans mailing lists, visit:
> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
>
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists



Reply via email to