incubator-depot-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Mark R. Diggory" <>
Subject MD% Standards (was Re: MD5 and Mirrors ( was Re: MD5 Hash ))
Date Wed, 11 Feb 2004 17:51:18 GMT
Besides, my current experiments with gnu md5sum (2.0.21) show that the 
sum's on the Maven contents arn't verifyable to any other tool but the 
maven checksum plugin.

If they aren't verifiable to extenral tools thats a bad situation. I'm 
going to bring this up on the Maven list too.

A hard fast "dig" through the RFC suggests a loophole here as there is 
no reference to what the contents of a md5 signature fle should look 
like. Seems more of a inherant "suggestion" in the implementation itself.


Mark R. Diggory wrote:

> Its a tough call, is there any "standard" for the structure of the md5 
> contents out there? I think the Maven team would be keen to play along 
> with a standard and yet play along with any configurability as well.
> -Mark Diggory
> Markus M. May wrote:
>> Adam is perfectly right about this stuff. There is one more thing we 
>> need to
>> think about. Some repositories treat md5-files different. The 
>> structure on
>> is [filename - MD5 Hash]. But on ibiblio (maven-repository) 
>> it is
>> just [MD5 Hash]. So this needs to be somehow configurable.
>> One more thing to think about :-)

Mark Diggory
Software Developer
Harvard MIT Data Center

View raw message