[
https://issues.apache.org/jira/browse/HBASE-9690?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13782954#comment-13782954
]
André Kelpe commented on HBASE-9690:
------------------------------------
It seems, that the mirrors are lacking those files:
Examples:
http://mirror.serversupportforum.de/apache/hbase/hbase-0.94.12/
http://ftp.halifax.rwth-aachen.de/apache/hbase/hbase-0.94.12/
http://apache.mirror.iphh.net/hbase/hbase-0.94.12/
> provide md5 and sha1 checksums for tarballs
> -------------------------------------------
>
> Key: HBASE-9690
> URL: https://issues.apache.org/jira/browse/HBASE-9690
> Project: HBase
> Issue Type: Improvement
> Affects Versions: 0.94.12
> Reporter: André Kelpe
>
> Currently there is no way to verify the integrity of release tarballs. Please
> provide md5, sha1 and gpg signatures, so that users can be sure, that they
> have the correct tarball.
> Many open source projects provide the above and hbase would benefit from that
> as well.
> This looks like the right solution for the problem:
> http://nicoulaj.github.io/checksum-maven-plugin/examples/generating-project-artifacts-checksums.html
--
This message was sent by Atlassian JIRA
(v6.1#6144)
