www-repository mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Steve Loughran" <steve.lough...@gmail.com>
Subject Re: bad checksums?
Date Tue, 21 Mar 2006 09:23:34 GMT
On 3/21/06, Carlos Sanchez <carlos@apache.org> wrote:
> Maven cmd line option
> -C,--strict-checksums         Fail the build if checksums don't match

ok, but this is the maven ant task suite. There is no -C option, just
like there is no -offline option.

I know checksums are insecure, but they are the only integrity check
we have. if they are there, and they are downloaded, then mismatch
should go to failure. Then we can worry about signature mismatch

View raw message