Re: [ofbiz-framework] branch release17.12 updated: Improved: Replace Bintray by a new place to upload the Gradle Wrapper (OFBIZ-12192)

2021-04-11 Thread Michael Brohl
As a user, I would find it annoying if the files would be deleted just because I have not the right tools installed on the system. This would stop the whole process of building and running OFBiz. We already have the warning, let's leave the decision to the user. Can you explain where the

Re: [ofbiz-framework] branch release17.12 updated: Improved: Replace Bintray by a new place to upload the Gradle Wrapper (OFBIZ-12192)

2021-04-11 Thread Jacques Le Roux
Hi Michael, For using SHA256 instead of SHA1, since we did not release it yet, why not beginning with 18.12.01? Even for 17.12.07 I'd say, why waiting a tiny but possible vulnerability? Switching from SHA1 to SHA256 is easily done, no? It's not exactly the same case, but in

Re: [ofbiz-framework] branch release17.12 updated: Improved: Replace Bintray by a new place to upload the Gradle Wrapper (OFBIZ-12192)

2021-04-11 Thread Michael Brohl
Hi Jacques, why should we change the checksum algorithm now, for this release? I would leave it as is and introduce another one beginning with trunk. For the shasum part: the program is needed for the checks, like other programs (curl/wget, grep, whereis) are needed also. The script clearly