[ 
https://issues.apache.org/jira/browse/OAK-6650?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16214224#comment-16214224
 ] 

Julian Reschke commented on OAK-6650:
-------------------------------------

Had to remove truncation of extension to three characters:
{noformat}
Index: check-release.sh
===================================================================
--- check-release.sh    (Revision 22609)
+++ check-release.sh    (Revision 22610)
@@ -101,7 +101,7 @@
   fi

   for HASH in md5 sha1; do
-    EXT=`echo "$HASH" | cut -c 1-3`
+    EXT=$HASH # removed truncation to three characters due to sha1 name change
     if [ ! -f "$BASEDIR/$RCDIR/$NAME.$EXT" ]; then
       error "  NOT FOUND: $NAME.$EXT"
     else

{noformat}

> new release checksum requirements
> ---------------------------------
>
>                 Key: OAK-6650
>                 URL: https://issues.apache.org/jira/browse/OAK-6650
>             Project: Jackrabbit Oak
>          Issue Type: Improvement
>            Reporter: Davide Giannella
>            Assignee: Davide Giannella
>             Fix For: 1.8, 1.2.28, 1.0.40, 1.4.19, 1.6.6, 1.7.10
>
>         Attachments: OAK-6650-checkrelease.diff
>
>
> As of various SHA algorithm the Apache policies around signatures and 
> checksums changed requiring to specify the sha algorithm as part of the file 
> extension: sha1, sha256, sha512.
> http://www.apache.org/dev/release-distribution#sigs-and-sums
> currently Oak signs with sha-1 and we should at least change the file 
> extension
> h3. impacted areas
> - release process (pom.xml)
> - check release
> - html download page



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to