[ 
https://issues.apache.org/jira/browse/MINSTALL-138?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17208082#comment-17208082
 ] 

Konrad Windszus edited comment on MINSTALL-138 at 10/5/20, 1:32 PM:
--------------------------------------------------------------------

This would lead to generating SHA1 and MD5 for the generated checksum artifacts 
(if you deploy those as well). If you don't deploy SHA-512 (like you do in 
https://github.com/apache/maven/blob/master/apache-maven/pom.xml#L310-L336) the 
validation of the checksum cannot easily be automated (as it cannot be 
retrieved from the staging repository).


was (Author: kwin):
This would lead to generating SHA1 and MD5 for the generated checksum artifacts 
(if you deploy those as well). If you don't deploy (like you do in 
https://github.com/apache/maven/blob/master/apache-maven/pom.xml#L310-L336) the 
validation of the checksum cannot easily be automated (as it cannot be 
retrieved from the staging repository).

> option to calculate more checksum such sha-256 sha-512
> ------------------------------------------------------
>
>                 Key: MINSTALL-138
>                 URL: https://issues.apache.org/jira/browse/MINSTALL-138
>             Project: Maven Install Plugin
>          Issue Type: New Feature
>          Components: install:install, install:install-file
>    Affects Versions: 2.5.2
>            Reporter: Olivier Lamy
>            Assignee: Olivier Lamy
>            Priority: Major
>
> currently install generate only sha-1 we should be able to generate sha-256 
> and sha-512 as well.
> NOTE: sha-512 will be required by Apache policy.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to