[
https://issues.apache.org/jira/browse/JCRVLT-742?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17846854#comment-17846854
]
Konrad Windszus commented on JCRVLT-742:
----------------------------------------
FTR: The SHA1 is still generated and used in the email template being
generated, but no longer persisted as file:
https://github.com/apache/jackrabbit-filevault/pull/331/files#diff-9c5fb3d1b7e3b0f54bc5c4182965c4fe1f9023d449017cece3005d3f90e8e4d8R300
> Stop generating MD5, SHA1 and SHA512 with Ant
> ---------------------------------------------
>
> Key: JCRVLT-742
> URL: https://issues.apache.org/jira/browse/JCRVLT-742
> Project: Jackrabbit FileVault
> Issue Type: Improvement
> Components: package maven plugin
> Reporter: Konrad Windszus
> Assignee: Konrad Windszus
> Priority: Major
> Fix For: 3.7.4, package-maven-plugin-1.3.8
>
>
> Currently there is still manual generation of MD5, SHA1 and SHA512 checksum
> via Ant in
> https://github.com/apache/jackrabbit-filevault/blob/3c9f668fc608c815db154b2569bf16c71f668428/pom.xml#L325-L340
> and
> https://github.com/apache/jackrabbit-filevault-package-maven-plugin/blob/c0433155e825130d1c9a435f5fb837af8e9c46d4/pom.xml#L744-L759.
> MD5 and SHA1 should no longer be provided according to
> https://infra.apache.org/release-distribution.html#sigs-and-sums and SHA512
> is automatically created through the ASF parent pom
> (https://maven.apache.org/pom/asf/#the-apache-release-profile).
> In https://jackrabbit.apache.org/jcr/downloads.html#vlt we only link the
> SHA512 anyways.
> Note: This is only about ASF dist not about the checksums used in Maven
> repositories which are transparently created by Maven Resolver.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
