Patrick Hunt wrote:
Have you phased out md5s purposely?
Yes, although perhaps I should not have. I knew that one was optional,
and that SHA1 is thought to be a better hash than MD5, so assumed that
MD5 was optional. But now that you've called attention to it, it seems
that SHA1 is optional and MD5 is required (perhaps since tools expect it).
http://www.apache.org/dev/release-signing.html#policy
I have created MD5 hashes for this release candidate & will update
build.sh to create these as well from now on.
Doug