accumulo-notifications mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Christopher Tubbs (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (ACCUMULO-3457) Accumulo download mirrors should not have MD5 and SHA1 hash files
Date Wed, 31 Dec 2014 20:53:13 GMT

    [ https://issues.apache.org/jira/browse/ACCUMULO-3457?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14262427#comment-14262427
] 

Christopher Tubbs commented on ACCUMULO-3457:
---------------------------------------------

By "standard" (which I meant to say "a standard"), I mean "de-facto", "common", or "not infrequent".
Apologies for my lack of precision.

Here's some places where it is still used:
# [Wikipedia's example usage uses this filename pattern|http://en.wikipedia.org/wiki/Sha1sum]
# [Ubuntu uses a variation, with an "S" on the end|http://mirror.anl.gov/pub/ubuntu-iso/CDs/10.04.4/]
# [CentOS uses a lowercase variation, with .txt|http://vault.centos.org/5.3/isos/x86_64/]

I used to see this a lot more on various FTP mirrors/servers, following the same conventions
as README, LICENSE, NOTICE, INSTALL, BUILD, etc. But now that I'm looking for it, I can't
find an overwhelming number of them these days.

> Accumulo download mirrors should not have MD5 and SHA1 hash files
> -----------------------------------------------------------------
>
>                 Key: ACCUMULO-3457
>                 URL: https://issues.apache.org/jira/browse/ACCUMULO-3457
>             Project: Accumulo
>          Issue Type: Bug
>          Components: build
>    Affects Versions: 1.4.5, 1.5.2, 1.6.1
>            Reporter: Mike Walch
>
> The download mirrors of Apache Accumulo incorrectly have the MD5 & SHA1 hash files
of the Accumulo release tarballs.  See http://mirrors.koehn.com/apache/accumulo/1.6.1/ for
example.
> These files should only be available from ASF hosts (i.e https://www.apache.org/dist/accumulo/)
> See http://www.apache.org/dev/release-publishing.html for more info.
> These hash files should not be included in future releases and should be removed from
the mirrors for old releases if possible.
> The project website does reference ASF hosts for these files.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message