http://www.javaworld.com/article/3159186/security/oracle-to-java-devs-stop-signing-jar-files-with-md5.html

Martin Grigorov
Wicket Training and Consulting
https://twitter.com/mtgrigorov

On Thu, Jan 14, 2016 at 11:54 AM, Maxim Solodovnik <[email protected]>
wrote:

> Not reproducible anymore :(
>
> On Tue, Jan 12, 2016 at 11:38 AM, Maxim Solodovnik <[email protected]>
> wrote:
>
> > thanks for checking!
> >
> > build was successful this time
> > will try to run it couple more times and try to find out what was wrong
> >
> > On Tue, Jan 12, 2016 at 2:44 AM, Martin Grigorov <[email protected]>
> > wrote:
> >
> >> https://issues.apache.org/jira/browse/WICKET-6074
> >>
> >> The build passes fine here.
> >>
> >> Martin Grigorov
> >> Wicket Training and Consulting
> >> https://twitter.com/mtgrigorov
> >>
> >> On Mon, Jan 11, 2016 at 9:27 PM, Martin Grigorov <[email protected]>
> >> wrote:
> >>
> >> > Hi Maxim,
> >> >
> >> > $ ls -al
> >> > total 18M
> >> > -rw-r----- 1 martin martin 18M Jan 11 21:19 apache-wicket-7.2.0.tar.gz
> >> > -rw-r----- 1 martin martin 204 Jan 11 21:18
> >> apache-wicket-7.2.0.tar.gz.asc
> >> > -rw-r----- 1 martin martin 129 Jan 11 21:18
> >> apache-wicket-7.2.0.tar.gz.md5
> >> > -rw-r----- 1 martin martin 131 Jan 11 21:18
> >> apache-wicket-7.2.0.tar.gz.sha
> >> >
> >> > $ md5sum apache-wicket-7.2.0.tar.gz
> >> >
> >> >
> >> > 6c9ecbb93addc07ef18c07d0cd50e3f9  apache-wicket-7.2.0.tar.gz
> >> > $ cat apache-wicket-7.2.0.tar.gz.md5
> >> >
> >> >
> >> > target/dist/apache-wicket-7.2.0.tar.gz: 6C 9E CB B9 3A DD C0 7E  F1
> 8C
> >> 07
> >> > D0 CD
> >> >                                         50 E3 F9
> >> >
> >> > $ shasum  apache-wicket-7.2.0.tar.gz
> >> >
> >> > dc87039c30263063d2bd9130622fd9c6a8422211  apache-wicket-7.2.0.tar.gz
> >> > $ cat apache-wicket-7.2.0.tar.gz.sha
> >> > target/dist/apache-wicket-7.2.0.tar.gz: DC87 039C 3026 3063 D2BD
> 9130
> >> > 622F D9C6
> >> >                                         A842 2211
> >> >
> >> > The sums are OK!
> >> > But it seems Martijn uses sha1sum, not sha256sum
> >> >
> >> > I'll file a ticket!
> >> >
> >> >
> >> > Martin Grigorov
> >> > Wicket Training and Consulting
> >> > https://twitter.com/mtgrigorov
> >> >
> >> > On Mon, Jan 11, 2016 at 10:51 AM, Maxim Solodovnik <
> >> [email protected]>
> >> > wrote:
> >> >
> >> >> Hello Martin :)
> >> >>
> >> >> I do remember we have discussed this,  just checked the thread
> >> >> the problem is SHA sums are not correlated:
> >> >>
> >> >> cat apache-wicket-7.2.0.tar.gz.sha
> >> >> target/dist/apache-wicket-7.2.0.tar.gz: DC87 039C 3026 3063 D2BD
> 9130
> >> >> 622F
> >> >> D9C6
> >> >>                                         A842 2211
> >> >>
> >> >> sha256sum apache-wicket-7.2.0.tar.gz
> >> >> a96bb8829b08cd1ba862d061f840da74b61b59bfdfda955ad761e5ec4c392784
> >> >>  apache-wicket-7.2.0.tar.gz
> >> >>
> >> >> how this can be compared?
> >> >>
> >> >> My settings for locale:
> >> >>
> >> >> locale
> >> >> LANG=en_US.UTF-8
> >> >> LANGUAGE=en_US
> >> >> LC_CTYPE="en_US.UTF-8"
> >> >> LC_NUMERIC=en_GB.UTF-8
> >> >> LC_TIME=en_GB.UTF-8
> >> >> LC_COLLATE="en_US.UTF-8"
> >> >> LC_MONETARY=en_GB.UTF-8
> >> >> LC_MESSAGES="en_US.UTF-8"
> >> >> LC_PAPER=en_GB.UTF-8
> >> >> LC_NAME=en_GB.UTF-8
> >> >> LC_ADDRESS=en_GB.UTF-8
> >> >> LC_TELEPHONE=en_GB.UTF-8
> >> >> LC_MEASUREMENT=en_GB.UTF-8
> >> >> LC_IDENTIFICATION=en_GB.UTF-8
> >> >> LC_ALL=
> >> >>
> >> >>
> >> >>
> >> >>
> >> >> On Mon, Jan 11, 2016 at 3:44 PM, Martin Grigorov <
> [email protected]
> >> >
> >> >> wrote:
> >> >>
> >> >> > Hi Maxim,
> >> >> >
> >> >> >
> >> >> > On Mon, Jan 11, 2016 at 10:29 AM, Maxim Solodovnik <
> >> >> [email protected]>
> >> >> > wrote:
> >> >> >
> >> >> > > Hello All,
> >> >> > >
> >> >> > > I'm trying to test 7.2.0 release, my steps are
> >> >> > > 1) Download
> >> >> > >
> >> >> > >
> >> >> >
> >> >>
> >> https://dist.apache.org/repos/dist/dev/wicket/7.2.0/apache-
> wicket-7.2.0.tar.gz
> >> >> > > + signatures
> >> >> > > 2) check MD5 using `md5sum -c apache-wicket-7.2.0.tar.gz.md5`
> >> >> > > Result: md5sum: apache-wicket-7.2.0.tar.gz.md5: no properly
> >> formatted
> >> >> MD5
> >> >> > > checksum lines found
> >> >> > > 3) check sha sum using `sha256sum -c
> >> apache-wicket-7.2.0.tar.gz.sha`
> >> >> > > Result: sha256sum: apache-wicket-7.2.0.tar.gz.sha: no properly
> >> >> formatted
> >> >> > > SHA256 checksum lines found
> >> >> > > 4) check GPG signature using `gpg --verify
> >> >> > apache-wicket-7.2.0.tar.gz.asc`
> >> >> > > Result: OK
> >> >> > >
> >> >> >
> >> >> > We have discussed this 2 months ago.
> >> >> >
> >> >> >
> >> >> > >
> >> >> > > 5) set system JDK to be 1.7
> >> >> > > java version "1.7.0_76"
> >> >> > > Java(TM) SE Runtime Environment (build 1.7.0_76-b13)
> >> >> > > Java HotSpot(TM) 64-Bit Server VM (build 24.76-b04, mixed mode)
> >> >> > >
> >> >> > > 6) try to compile using: "mvn clean install"
> >> >> > > Result:
> >> >> > > Running
> >> >> > org.apache.wicket.spring.injection.annot.
> SpringBeanWithGenericsTest
> >> >> > > Tests run: 7, Failures: 1, Errors: 0, Skipped: 0, Time elapsed:
> >> 0.56
> >> >> sec
> >> >> > > <<< FAILURE! - in
> >> >> > > org.apache.wicket.spring.injection.annot.
> SpringBeanWithGenericsTest
> >> >> > >
> >> >> > >
> >> >> >
> >> >>
> >> listField(org.apache.wicket.spring.injection.annot.
> SpringBeanWithGenericsTest)
> >> >> > >  Time elapsed: 0.072 sec  <<< FAILURE!
> >> >> > > java.lang.AssertionError: expected:<3> but was:<1>
> >> >> > > at org.junit.Assert.fail(Assert.java:88)
> >> >> > > at org.junit.Assert.failNotEquals(Assert.java:834)
> >> >> > > at org.junit.Assert.assertEquals(Assert.java:645)
> >> >> > > at org.junit.Assert.assertEquals(Assert.java:631)
> >> >> > > at
> >> >> > >
> >> >> > >
> >> >> >
> >> >>
> >> org.apache.wicket.spring.injection.annot.SpringBeanWithGenericsTest.
> listField(SpringBeanWithGenericsTest.java:143)
> >> >> > >
> >> >> >
> >> >> > This is new.
> >> >> > I'll check it tonight.
> >> >> > Could it be because you use different locale, e.g. ru_RU ?
> >> >> >
> >> >> >
> >> >> > >
> >> >> > > [INFO] Reactor Summary:
> >> >> > > [INFO]
> >> >> > > [INFO] Wicket Parent ......................................
> >> SUCCESS [
> >> >> > >  2.454 s]
> >> >> > > [INFO] Wicket Util ........................................
> >> SUCCESS [
> >> >> > > 22.079 s]
> >> >> > > [INFO] Wicket Request .....................................
> >> SUCCESS [
> >> >> > >  3.775 s]
> >> >> > > [INFO] Wicket Core ........................................
> SUCCESS
> >> >> > [01:45
> >> >> > > min]
> >> >> > > [INFO] Wicket .............................................
> >> SUCCESS [
> >> >> > >  0.142 s]
> >> >> > > [INFO] Wicket Date/Time ...................................
> >> SUCCESS [
> >> >> > >  4.707 s]
> >> >> > > [INFO] Wicket Extensions ..................................
> >> SUCCESS [
> >> >> > > 18.782 s]
> >> >> > > [INFO] Wicket Development Utilities .......................
> >> SUCCESS [
> >> >> > >  3.338 s]
> >> >> > > [INFO] Wicket IoC common code .............................
> >> SUCCESS [
> >> >> > >  2.702 s]
> >> >> > > [INFO] Wicket CDI Integration .............................
> >> SUCCESS [
> >> >> > > 11.569 s]
> >> >> > > [INFO] Wicket Spring Integration ..........................
> >> FAILURE [
> >> >> > >  2.234 s]
> >> >> > > [INFO] Wicket Velocity ....................................
> SKIPPED
> >> >> > >
> >> >> > >
> >> >> > > What I'm I doing wrong?
> >> >> > > OS: Ubuntu 14.04.3 LTS
> >> >> > >
> >> >> > > Thanks in advance!
> >> >> > >
> >> >> > > --
> >> >> > > WBR
> >> >> > > Maxim aka solomax
> >> >> > >
> >> >> >
> >> >>
> >> >>
> >> >>
> >> >> --
> >> >> WBR
> >> >> Maxim aka solomax
> >> >>
> >> >
> >> >
> >>
> >
> >
> >
> > --
> > WBR
> > Maxim aka solomax
> >
>
>
>
> --
> WBR
> Maxim aka solomax
>

Reply via email to