[ https://issues.apache.org/jira/browse/HBASE-9690?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13788055#comment-13788055 ]
André Kelpe commented on HBASE-9690: ------------------------------------ any news on this? > HBase Mirrors are missing md5 and sha1 checksums for tarballs > ------------------------------------------------------------- > > Key: HBASE-9690 > URL: https://issues.apache.org/jira/browse/HBASE-9690 > Project: HBase > Issue Type: Improvement > Affects Versions: 0.94.12 > Reporter: André Kelpe > > Currently there is no way to verify the integrity of release tarballs. Please > provide md5, sha1 and gpg signatures, so that users can be sure, that they > have the correct tarball. > Many open source projects provide the above and hbase would benefit from that > as well. > This looks like the right solution for the problem: > http://nicoulaj.github.io/checksum-maven-plugin/examples/generating-project-artifacts-checksums.html -- This message was sent by Atlassian JIRA (v6.1#6144)