Does the originalChecksums has any values in them or they are just
empty/null (I expect them to be empty)?
If you import to Artifactory without metadata you loose metadata on
files/folders including the
original client checksums (this is why I expect the original checksums to be
empty in your case).
I opened an issue
<http://issues.jfrog.org/jira/browse/RTFACT-3076>regarding the client
checksums when deploying from the ui. I think it'll be
better to
use the server checksums by default when deploying from the ui and display
an help message that
checksums can be deployed separately (or as part of a bundle).
Regarding maven, it does calculate checksums of deployed artifacts and
compares them with the checksums
coming from the server. But only if the server has the checksum files.
Yossi
On Mon, Apr 12, 2010 at 6:56 PM, fmt <[email protected]> wrote:
>
> Hi,
>
> Thanks for your quick answer and your explanations.
>
> If I change the checksum policy to "Trust server generated checksums", the
> warnings disappear. And using the curl command you provided, I see there is
> indeed an "originalChecksums" attribute set for the artifact in fault.
>
> I deployed the artifacts which are causing this warnings using the
> artifactory UI using zip bundles. When and how were these
> 'originalChecksums' done ? It's possible I downloaded the md5 and sha1
> files
> along with the jars and pom files and added them to the zip. Perhaps this
> checksums were used by artifactory as original checksums ?
>
> I first thought that when you download an artifact using maven a checksum
> was made on the client and compared to the provided checksum from
> artifactory to verify that the download was correct. From your explanation
> I
> have to understand that there is no checksum done by maven on download ?
>
> Then I still have a question. I exported all my artifacts in a backup
> folder
> using the option "no metadata", then removed the repository in artifactory,
> then imported back the whole thing. I though this would have cleaned up the
> metadata and remove any old checksum (therefore my idea about the checksum
> comparaison after download).
> Obviously from the curl answer, the metadata are still there. Is there a
> way
> to remove this 'originalChecksum' ? Or is the only way to download the jars
> and to import them in artifactory again ?
>
> Regards,
> Florian
> --
> View this message in context:
> http://n2.nabble.com/Checksum-errors-when-downloading-artifacts-from-artifactory-2-2-2-tp4889968p4890932.html
> Sent from the Artifactory - Users mailing list archive at Nabble.com.
>
>
> ------------------------------------------------------------------------------
> Download Intel® Parallel Studio Eval
> Try the new software tools for yourself. Speed compiling, find bugs
> proactively, and fine-tune applications for parallel performance.
> See why Intel Parallel Studio got high marks during beta.
> http://p.sf.net/sfu/intel-sw-dev
> _______________________________________________
> Artifactory-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/artifactory-users
>
------------------------------------------------------------------------------
Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Artifactory-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/artifactory-users
