[jira] [Comment Edited] (SLING-7534) Release policy - stop providing MD5 signatures

2018-04-13 Thread Robert Munteanu (JIRA) 

[ 
https://issues.apache.org/jira/browse/SLING-7534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16437189#comment-16437189
 ] 

Robert Munteanu edited comment on SLING-7534 at 4/13/18 11:10 AM:
--

Since what matters is whatever is stored in dist.apache.org, we can start off 
by removing .md5 files and ensuring we have .sha1 files for everything.

_Edit_: see also https://checker.apache.org/projs/sling.html


was (Author: rombert):
Since what matters is whatever is stored in dist.apache.org, we can start off 
by removing .md5 files and ensuring we have .sha1 files for everything.

> Release policy - stop providing MD5 signatures
> --
>
> Key: SLING-7534
> URL: https://issues.apache.org/jira/browse/SLING-7534
> Project: Sling
>  Issue Type: Task
>  Components: Tooling
>Reporter: Robert Munteanu
>Priority: Major
>
> See http://www.apache.org/dev/release-distribution#sigs-and-sums , we SHOULD 
> no longer provide MD5 checksums for new releases.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

[jira] [Comment Edited] (SLING-7534) Release policy - stop providing MD5 signatures

2018-04-13 Thread Bertrand Delacretaz (JIRA) 

[ 
https://issues.apache.org/jira/browse/SLING-7534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16436956#comment-16436956
 ] 

Bertrand Delacretaz edited comment on SLING-7534 at 4/13/18 7:35 AM:
-

As per discussion at [1], it looks like it's indeed {{maven-deploy-plugin}} 
which generates the checksum files - although I don't see a mention of 
checksums in the docs at 
[http://maven.apache.org/plugins/maven-deploy-plugin/deploy-mojo.html] so I'm 
still a bit skeptical.

However in INFRA-14923 and  at [1] Brian Fox says that getting rid of {{.md5}} 
requires Nexus code changes.

I suggest that we wait for INFRA-14923 to be clarified, nothing's urgent.

[1] 
[https://lists.apache.org/thread.html/c50e4842dbbe13b8196a43fa76d6040f8971bc5e812b561d080c5776@%3Cusers.infra.apache.org%3E]


was (Author: bdelacretaz):
As per discussion at [1], it looks like it's indeed {{maven-deploy-plugin}} 
which generates the checksum files.

However in INFRA-14923 and  at [1] Brian Fox says that getting rid of {{.md5}} 
requires Nexus code changes.

I suggest that we wait for INFRA-14923 to be clarified, nothing's urgent.

[1] 
https://lists.apache.org/thread.html/c50e4842dbbe13b8196a43fa76d6040f8971bc5e812b561d080c5776@%3Cusers.infra.apache.org%3E

> Release policy - stop providing MD5 signatures
> --
>
> Key: SLING-7534
> URL: https://issues.apache.org/jira/browse/SLING-7534
> Project: Sling
>  Issue Type: Task
>  Components: Tooling
>Reporter: Robert Munteanu
>Priority: Major
>
> See http://www.apache.org/dev/release-distribution#sigs-and-sums , we SHOULD 
> no longer provide MD5 checksums for new releases.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)