Hi Thomas, I created the md5 and sha sums with gpg, as mentioned in the guidelines of Apache (http://www.apache.org/dev/release-signing.html#md5):
gpg --print-md MD5 apache-empire-db-2.0.3-incubating.tar.gz > apache-empire-db-2.0.3-incubating.tar.gz.md5 gpg --print-md SHA1 apache-empire-db-2.0.3-incubating.tar.gz > apache-empire-db-2.0.3-incubating.tar.gz.sha I'll ask on the incubator mailing list about what to use - maybe the guidelines should then be adapted, too. Thanks for looking into that, Joerg -----Ursprüngliche Nachricht----- Von: Thomas Fischer [mailto:[EMAIL PROTECTED] Gesendet: Samstag, 6. September 2008 14:57 An: [email protected] Betreff: md5 and sha sums What program do you use to calculate md5sums ? Your format looks rather nonstandard: [EMAIL PROTECTED]:/data/empire-db> cat apache-empire-db-2.0.3-incubating.tar.gz.md5 apache-empire-db-2.0.3-incubating.tar.gz: 11 DA FB 22 D9 B2 B9 01 22 9B CF 8B 8A 21 E0 9C usually, md5sums would have the following format: [EMAIL PROTECTED]:/data/empire-db> md5sum apache-empire-db-2.0.3-incubating.tar.gz 11dafb22d9b2b901229bcf8b8a21e09c apache-empire-db-2.0.3-incubating.tar.gz Using your format, the md5sum cannot be checked automatically by md5sum: [EMAIL PROTECTED]:/data/empire-db> md5sum -c apache-empire-db-2.0.3-incubating.tar.gz.md5 md5sum: apache-empire-db-2.0.3-incubating.tar.gz.md5: keine korrekt formatierte MD5-Prfsummenzeile gefunden Also, I am not sure whether mirrors are checked automatically for their md5sum. If yes, this check will fail. With a standard format, the check is easy: [EMAIL PROTECTED]:/data/empire-db> md5sum apache-empire-db-2.0.3-incubating.tar.gz > test.md5 [EMAIL PROTECTED]:/data/empire-db> md5sum -c test.md5 apache-empire-db-2.0.3-incubating.tar.gz: OK Same goes for the sha files and the sha1sum utility Regards, Thomas
