maven-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Henk Penning (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (MNG-6376) How to get rid of .md5's in www.a.o/dist/ ?
Date Sun, 18 Mar 2018 11:27:00 GMT

    [ https://issues.apache.org/jira/browse/MNG-6376?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16403975#comment-16403975
] 

Henk Penning commented on MNG-6376:
-----------------------------------

... not sure if I understand that last comment ("apart from that ASF ...").

Policy says the each package MUST (ie it is an obligation) be accompanied by (at least one)
checksum file (.md5 or .sha1 or ....).

But then policy says that the checksum file SHOULD (ie recommends) be SHA,

and checksum file SHOULD NOT (ie recommends) be MD5.

> How to get rid of .md5's in www.a.o/dist/ ?
> -------------------------------------------
>
>                 Key: MNG-6376
>                 URL: https://issues.apache.org/jira/browse/MNG-6376
>             Project: Maven
>          Issue Type: Wish
>          Components: General
>            Reporter: Henk Penning
>            Priority: Major
>
> ASF policy (strongly) recommends not to publish .md5's in [www.apache.org/dist/,|http://www.a.o/dist/,]
> that is : [https://dist.apache.org/repos/dist/release/]
> -- How can maven users achieve this ?
> -- Is it possible (and sensible) to add something to maven, to make it easy (or easier)
?
> I must confess I don't know the first thing about maven etc ; hope my question makes
sense.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message