Patrick Hunt wrote:
Have you phased out md5s purposely?

Yes, although perhaps I should not have. I knew that one was optional, and that SHA1 is thought to be a better hash than MD5, so assumed that MD5 was optional. But now that you've called attention to it, it seems that SHA1 is optional and MD5 is required (perhaps since tools expect it).

http://www.apache.org/dev/release-signing.html#policy

I have created MD5 hashes for this release candidate & will update build.sh to create these as well from now on.

Doug

Reply via email to