Return-Path: X-Original-To: apmail-accumulo-notifications-archive@minotaur.apache.org Delivered-To: apmail-accumulo-notifications-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 20B8B101D7 for ; Tue, 30 Dec 2014 23:10:13 +0000 (UTC) Received: (qmail 96760 invoked by uid 500); 30 Dec 2014 23:10:13 -0000 Delivered-To: apmail-accumulo-notifications-archive@accumulo.apache.org Received: (qmail 96718 invoked by uid 500); 30 Dec 2014 23:10:13 -0000 Mailing-List: contact notifications-help@accumulo.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: jira@apache.org Delivered-To: mailing list notifications@accumulo.apache.org Received: (qmail 96692 invoked by uid 99); 30 Dec 2014 23:10:13 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 30 Dec 2014 23:10:13 +0000 Date: Tue, 30 Dec 2014 23:10:13 +0000 (UTC) From: "Mike Walch (JIRA)" To: notifications@accumulo.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (ACCUMULO-3457) Accumulo download mirrors should not have MD5 and SHA1 hash files MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/ACCUMULO-3457?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14261618#comment-14261618 ] Mike Walch commented on ACCUMULO-3457: -------------------------------------- The Apache release publishing docs mentions that files with the following are excluded: .md5 .MD5 .sha1 .sha .sha256 .sha512 .asc .sig KEYS KEYS.txt However, Accumulo includes all the MD5 hashes in a file called MD5SUM & all SHA1 hashes in a file called SHA1SUM. I think it's the naming of these files. > Accumulo download mirrors should not have MD5 and SHA1 hash files > ----------------------------------------------------------------- > > Key: ACCUMULO-3457 > URL: https://issues.apache.org/jira/browse/ACCUMULO-3457 > Project: Accumulo > Issue Type: Bug > Components: build > Affects Versions: 1.4.5, 1.5.2, 1.6.1 > Reporter: Mike Walch > > The download mirrors of Apache Accumulo incorrectly have the MD5 & SHA1 hash files of the Accumulo release tarballs. See http://mirrors.koehn.com/apache/accumulo/1.6.1/ for example. > These files should only be available from ASF hosts (i.e https://www.apache.org/dist/accumulo/) > See http://www.apache.org/dev/release-publishing.html for more info. > These hash files should not be included in future releases and should be removed from the mirrors for old releases if possible. > The project website does reference ASF hosts for these files. -- This message was sent by Atlassian JIRA (v6.3.4#6332)