[ 
https://issues.apache.org/jira/browse/SLING-10354?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17347606#comment-17347606
 ] 

Konrad Windszus commented on SLING-10354:
-----------------------------------------

All signature checks in {{check_stage_release.sh}} only happen based on 
existence of signatures in the staging repo, i.e. if the repo does not contain 
them, no failure is being emitted (even for MD5, SHA1). We should do the same 
for SHA-512.

> Update check_staged_release.sh to verify SHA-512 signature for the source 
> release
> ---------------------------------------------------------------------------------
>
>                 Key: SLING-10354
>                 URL: https://issues.apache.org/jira/browse/SLING-10354
>             Project: Sling
>          Issue Type: Sub-task
>          Components: Tooling
>            Reporter: Robert Munteanu
>            Priority: Major
>




--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to