www-repository mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Patrick Linskey" <...@apache.org>
Subject Re: [repo] /www/people.apache.org/repo/m2-ibiblio-rsync-repository/
Date Fri, 29 Feb 2008 22:11:57 GMT
Hi,

I was waiting for a response from you regarding Craig Russell's
comment to repository@ in this thread. In case you aren't on
repository@, here's a copy of his comment:

On Mon, Feb 25, 2008 at 2:31 PM, Craig L Russell <Craig.Russell@sun.com> wrote:
> Hi Wendy,
>
>  The .asc, .sha1, and md5 files should never be mirrored, as this can
>  lead a user to get a corrupted version of the artifact. These files
>  must only be available from the Apache site, not e.g. from ibiblio.
>
>  What is the point of putting these files into the ibiblio rsync
>  repository then?
>
>  I might be missing some information, please correct my understanding.

Any thoughts?

-Patrick

On Thu, Feb 28, 2008 at 8:53 PM, Wendy Smoak <wsmoak@gmail.com> wrote:
> On Mon, Feb 25, 2008 at 10:58 AM, Wendy Smoak <wsmoak@gmail.com> wrote:
>  > On Sun, Feb 24, 2008 at 8:59 PM, Patrick Linskey <pcl@apache.org> wrote:
>  >
>
> >  >  I'll look into the signature stuff when I'm in the office tomorrow.
>  >  >  FWIW, I'm Just Following Instructions here; I don't know much about
>  >  >  what is required, and am just following the directions that we've used
>  >  >  for past OpenJPA release uploads.
>  >
>  >  Here's some information from the ASF site:
>  >  http://www.apache.org/dev/release-signing.html#policy
>  >
>  >  It's possible that this wasn't done for prior releases, but the
>  >  signatures are required.
>  >
>  >  If you're using Maven 2, the GPG plugin can be configured to create
>  >  the signatures for you.  If you have any questions, either repository@
>  >  or the Maven users list can help.
>
>  Hi, Patrick.  Is there any update on this?
>
>  Thanks,
>  Wendy
>



-- 
Patrick Linskey
202 669 5907

Mime
View raw message