[ 
https://issues.apache.org/jira/browse/OAK-6650?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16162836#comment-16162836
 ] 

Davide Giannella commented on OAK-6650:
---------------------------------------

feature branch for patching: 
https://github.com/davidegiannella/jackrabbit-oak/compare/trunk...davidegiannella:OAK-6650?expand=1

> new release checksum requirements
> ---------------------------------
>
>                 Key: OAK-6650
>                 URL: https://issues.apache.org/jira/browse/OAK-6650
>             Project: Jackrabbit Oak
>          Issue Type: Improvement
>            Reporter: Davide Giannella
>            Assignee: Davide Giannella
>              Labels: candidate_oak_1_0, candidate_oak_1_2, candidate_oak_1_4, 
> candidate_oak_1_6
>             Fix For: 1.8
>
>
> As of various SHA algorithm the Apache policies around signatures and 
> checksums changed requiring to specify the sha algorithm as part of the file 
> extension: sha1, sha256, sha512.
> http://www.apache.org/dev/release-distribution#sigs-and-sums
> currently Oak signs with sha-1 and we should at least change the file 
> extension



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to