accumulo-notifications mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Mike Walch (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (ACCUMULO-3457) Accumulo download mirrors should not have MD5 and SHA1 hash files
Date Tue, 30 Dec 2014 23:10:13 GMT

    [ https://issues.apache.org/jira/browse/ACCUMULO-3457?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14261618#comment-14261618
] 

Mike Walch commented on ACCUMULO-3457:
--------------------------------------

The Apache release publishing docs mentions that files with the following are excluded:

 .md5 .MD5 .sha1 .sha .sha256 .sha512 .asc .sig KEYS KEYS.txt 

However, Accumulo includes all the MD5 hashes in a file called MD5SUM & all SHA1 hashes
in a file called SHA1SUM.  I think it's the naming of these files.

> Accumulo download mirrors should not have MD5 and SHA1 hash files
> -----------------------------------------------------------------
>
>                 Key: ACCUMULO-3457
>                 URL: https://issues.apache.org/jira/browse/ACCUMULO-3457
>             Project: Accumulo
>          Issue Type: Bug
>          Components: build
>    Affects Versions: 1.4.5, 1.5.2, 1.6.1
>            Reporter: Mike Walch
>
> The download mirrors of Apache Accumulo incorrectly have the MD5 & SHA1 hash files
of the Accumulo release tarballs.  See http://mirrors.koehn.com/apache/accumulo/1.6.1/ for
example.
> These files should only be available from ASF hosts (i.e https://www.apache.org/dist/accumulo/)
> See http://www.apache.org/dev/release-publishing.html for more info.
> These hash files should not be included in future releases and should be removed from
the mirrors for old releases if possible.
> The project website does reference ASF hosts for these files.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message