[ https://issues.apache.org/jira/browse/CASSANDRA-14970?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16737643#comment-16737643 ]
Michael Shuler edited comment on CASSANDRA-14970 at 1/8/19 11:52 PM: --------------------------------------------------------------------- [^0001-Update-release-checksum-algorithms-to-SHA-256-SHA-512.patch] Patch against {{cassandra-2.1}} branch. Merges up without conflict. {noformat} (cassandra-2.1)mshuler@hana:~/git/cassandra$ ls -l build/*.{gz,sha*} -rw-r--r-- 1 mshuler mshuler 25342702 Jan 8 17:04 build/apache-cassandra-2.1.20-SNAPSHOT-bin.tar.gz -rw-r--r-- 1 mshuler mshuler 65 Jan 8 17:04 build/apache-cassandra-2.1.20-SNAPSHOT-bin.tar.gz.sha256 -rw-r--r-- 1 mshuler mshuler 129 Jan 8 17:04 build/apache-cassandra-2.1.20-SNAPSHOT-bin.tar.gz.sha512 -rw-r--r-- 1 mshuler mshuler 17265833 Jan 8 17:04 build/apache-cassandra-2.1.20-SNAPSHOT-src.tar.gz -rw-r--r-- 1 mshuler mshuler 65 Jan 8 17:04 build/apache-cassandra-2.1.20-SNAPSHOT-src.tar.gz.sha256 -rw-r--r-- 1 mshuler mshuler 129 Jan 8 17:04 build/apache-cassandra-2.1.20-SNAPSHOT-src.tar.gz.sha512 {noformat} was (Author: mshuler): Patch against {{cassandra-2.1}} branch. Merges up without conflict. {noformat} (cassandra-2.1)mshuler@hana:~/git/cassandra$ ls -l build/*.{gz,sha*} -rw-r--r-- 1 mshuler mshuler 25342702 Jan 8 17:04 build/apache-cassandra-2.1.20-SNAPSHOT-bin.tar.gz -rw-r--r-- 1 mshuler mshuler 65 Jan 8 17:04 build/apache-cassandra-2.1.20-SNAPSHOT-bin.tar.gz.sha256 -rw-r--r-- 1 mshuler mshuler 129 Jan 8 17:04 build/apache-cassandra-2.1.20-SNAPSHOT-bin.tar.gz.sha512 -rw-r--r-- 1 mshuler mshuler 17265833 Jan 8 17:04 build/apache-cassandra-2.1.20-SNAPSHOT-src.tar.gz -rw-r--r-- 1 mshuler mshuler 65 Jan 8 17:04 build/apache-cassandra-2.1.20-SNAPSHOT-src.tar.gz.sha256 -rw-r--r-- 1 mshuler mshuler 129 Jan 8 17:04 build/apache-cassandra-2.1.20-SNAPSHOT-src.tar.gz.sha512 {noformat} > New releases must supply SHA-256 and/or SHA-512 checksums > --------------------------------------------------------- > > Key: CASSANDRA-14970 > URL: https://issues.apache.org/jira/browse/CASSANDRA-14970 > Project: Cassandra > Issue Type: Bug > Components: Packaging > Reporter: Michael Shuler > Assignee: Michael Shuler > Priority: Blocker > Fix For: 2.1.21, 2.2.14, 3.0.18, 3.11.4, 4.0 > > Attachments: > 0001-Update-downloads-for-sha256-sha512-checksum-files.patch, > 0001-Update-release-checksum-algorithms-to-SHA-256-SHA-512.patch > > > Release policy was updated around 9/2018 to state: > "For new releases, PMCs MUST supply SHA-256 and/or SHA-512; and SHOULD NOT > supply MD5 or SHA-1. Existing releases do not need to be changed." > build.xml needs to be updated from MD5 & SHA-1 to, at least, SHA-256 or both. > cassandra-builds/cassandra-release scripts need to be updated to work with > the new checksum files. > http://www.apache.org/dev/release-distribution#sigs-and-sums -- This message was sent by Atlassian JIRA (v7.6.3#76005) --------------------------------------------------------------------- To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org For additional commands, e-mail: commits-h...@cassandra.apache.org