zookeeper-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From ralph tice <ralph.t...@gmail.com>
Subject Re: ASC/SHA1/MD5 data for releases missing since 3.3.2
Date Wed, 29 Apr 2015 19:40:59 GMT
Thanks for the quick response; that makes sense from the security
standpoint.

For your reference, I ran across this concern via
https://github.com/saltstack-formulas/zookeeper-formula/issues/14 which
I've updated.

On Wed, Apr 29, 2015 at 1:29 PM, Michi Mutsuzaki <mutsuzaki@gmail.com>
wrote:

> You can find these files here: https://www.apache.org/dist/zookeeper/
>
> I guess these files are not mirrored for security reasons.
>
> On Wed, Apr 29, 2015 at 10:49 AM, Flavio Junqueira
> <fpjunqueira@yahoo.com.invalid> wrote:
> > That's weird, we definitely generate them for the RCs, and I'm quite
> sure were publishing them:
> > http://people.apache.org/~fpj/zookeeper-3.4.6-candidate-0/
> >
> > I'm not sure what's going, and Pat Hunt might know about it. I'll see if
> I can find out more in the meanwhile.
> > -Flavio
> >
> >
> >
> >      On Wednesday, April 29, 2015 4:13 PM, ralph tice <
> ralph.tice@gmail.com> wrote:
> >
> >
> >
> >  Hi,
> >
> > I was surprised to discover that releases haven't been published with
> > MD5/etc signatures since 3.3.2.
> >
> > Is this an intentional change by the project or an oversight?  Is there
> an
> > alternative method of verifying integrity of releases?
> >
> > Thanks,
> >
> > --Ralph
> >
> >
> >
> >
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message