www-infrastructure-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Christopher Tubbs (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (INFRA-8959) dist mirrors undesirably include hashes
Date Sat, 03 Jan 2015 01:32:34 GMT

    [ https://issues.apache.org/jira/browse/INFRA-8959?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14263368#comment-14263368

Christopher Tubbs commented on INFRA-8959:

I don't know how rare it is. I find myself doing it pretty often. I've also seen it used in
cases where people want to GPG-sign the hashes file [like this|https://getfedora.org/en/static/checksums/Fedora-Workstation-21-x86_64-CHECKSUM],
rather than provide detached signatures for each file.

In any case, thanks for the response. I've reverted the rename.

> dist mirrors undesirably include hashes
> ---------------------------------------
>                 Key: INFRA-8959
>                 URL: https://issues.apache.org/jira/browse/INFRA-8959
>             Project: Infrastructure
>          Issue Type: Wish
>          Components: Dists, Mirrors, SvnPubSub
>            Reporter: Christopher Tubbs
> According to http://www.apache.org/dev/release-publishing.html,
> "It is vital that hash, signature and KEYS files are only downloaded from ASF hosts.
So the following files are excluded from synchronisation:
> .md5 .MD5 .sha1 .sha .sha256 .sha512 .asc .sig KEYS KEYS.txt
> Do not use any other file names for such files."
> The Accumulo project inadvertently used a different naming convention (SHA1SUM and MD5SUM).
See ACCUMULO-3457.
> Since these filenames are not unusual, it is requested that the following case-insensitive
pattern also be excluded:
> (sha\d*|md5?)sums?([.]txt)?

This message was sent by Atlassian JIRA

View raw message