[
https://issues.apache.org/jira/browse/HBASE-9690?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13782951#comment-13782951
]
Jean-Marc Spaggiari commented on HBASE-9690:
--------------------------------------------
You can take a look here as an example:
http://www.us.apache.org/dist/hbase/hbase-0.94.12/
> provide md5 and sha1 checksums for tarballs
> -------------------------------------------
>
> Key: HBASE-9690
> URL: https://issues.apache.org/jira/browse/HBASE-9690
> Project: HBase
> Issue Type: Improvement
> Affects Versions: 0.94.12
> Reporter: André Kelpe
>
> Currently there is no way to verify the integrity of release tarballs. Please
> provide md5, sha1 and gpg signatures, so that users can be sure, that they
> have the correct tarball.
> Many open source projects provide the above and hbase would benefit from that
> as well.
> This looks like the right solution for the problem:
> http://nicoulaj.github.io/checksum-maven-plugin/examples/generating-project-artifacts-checksums.html
--
This message was sent by Atlassian JIRA
(v6.1#6144)
