Return-Path: 
 <repository-return-1135-apmail-repository-archive=apache.org@apache.org>
Delivered-To: apmail-repository-archive@www.apache.org
Received: (qmail 7856 invoked from network); 7 Mar 2006 10:01:14 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199)
  by minotaur.apache.org with SMTP; 7 Mar 2006 10:01:14 -0000
Received: (qmail 42682 invoked by uid 500); 7 Mar 2006 10:01:09 -0000
Delivered-To: apmail-repository-archive@apache.org
Received: (qmail 42564 invoked by uid 500); 7 Mar 2006 10:01:08 -0000
Mailing-List: contact repository-help@apache.org; run by ezmlm
Precedence: bulk
list-help: <mailto:repository-help@apache.org>
list-unsubscribe: <mailto:repository-unsubscribe@apache.org>
List-Post: <mailto:repository@apache.org>
Reply-To: repository@apache.org
List-Id: <repository.apache.org>
Delivered-To: mailing list repository@apache.org
Received: (qmail 42553 invoked by uid 99); 7 Mar 2006 10:01:08 -0000
Received: from asf.osuosl.org (HELO asf.osuosl.org) (140.211.166.49)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 07 Mar 2006 02:01:08 -0800
X-ASF-Spam-Status: No, hits=-0.0 required=10.0
	tests=SPF_PASS
X-Spam-Check-By: apache.org
Received-SPF: pass (asf.osuosl.org: domain of steve.loughran@gmail.com
 designates 64.233.184.205 as permitted sender)
Received: from [64.233.184.205] (HELO wproxy.gmail.com) (64.233.184.205)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 07 Mar 2006 02:01:00 -0800
Received: by wproxy.gmail.com with SMTP id i31so1356918wra
        for <repository@apache.org>; Tue, 07 Mar 2006 01:59:40 -0800 (PST)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
        s=beta; d=gmail.com;
        h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        b=AUAAD9WeoofPCo6Z0sRO0w12EdzyX4F5XNy88Z1jARfwtZhl40ZP5tsD7hatb7UzrDAI8z4X6zv7/PK9fYy7w2Vhlsju0cj4sm942q6QEmo3Px+IphXi/vx3pTIF5WRaACRfgU/9HCTOKeOl3LAZ7QSK6fHOQPsUDZVSfkf3Yck=
Received: by 10.54.111.10 with SMTP id j10mr20891wrc;
        Tue, 07 Mar 2006 01:59:39 -0800 (PST)
Received: by 10.54.83.20 with HTTP; Tue, 7 Mar 2006 01:59:39 -0800 (PST)
Message-ID: <c84a50780603070159p59782a46of7f3b67752382e5a@mail.gmail.com>
Date: Tue, 7 Mar 2006 09:59:39 +0000
From: "Steve Loughran" <steve.loughran@gmail.com>
To: repository@apache.org, geir@pobox.com
Subject: Re: securing downloads
In-Reply-To: <440CBC4E.9000806@pobox.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
References: <c84a50780603061351u99a5a10t14d13929d9cbb758@mail.gmail.com>
	 <440CBC4E.9000806@pobox.com>
X-Virus-Checked: Checked by ClamAV on apache.org
X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N

On 3/6/06, Geir Magnusson Jr <geir@pobox.com> wrote:
>
>
> Steve Loughran wrote:
> > I've just tweaked ant's fetch.xml build file, which can be used to
> > bootstrap m2 library downloading (it <gets> the maven tasks which can
> > do the rest of the work).
> >
> > Now I hard code the .sha1 checksum of the library we expect in a
> > properties file that comes with the ant distribution.
>
> What happens w/ an updated version of the library?

the version tag is also in the libraries.properties file. you need
them in sync, something I have mentioned in the comments in the file.