Hey Daniel & Radu, Yes, we use sha512 checksums for our artifacts. I think the confusion is probably with the copy on the "closer.cgi" download page, which has an example command that refers specifically to SHA256:
> Hashes can be calculated using GPG: > % gpg --print-md SHA256 downloaded_file > The output should be compared with the contents of the SHA256 file. Similarly for other hashes (SHA512, SHA1, MD5 etc) which may be provided. It does mention the existence of other hash types but it could be missed if a reader were skimming the example commands. On the Apache Druid side I think we are ok: 1) https://www.apache.org/dist/incubator/druid/0.15.0-incubating/ has the files named properly (.sha512 extension). 2) https://druid.apache.org/downloads.html refers to the checksum as a sha512, and links to https://www.apache.org/info/verification.html for verification instructions (which has sha512 example commands; however, the "checker' tool only works for sha256). On Thu, Jul 11, 2019 at 7:02 AM Daniel Gruno <humbed...@apache.org> wrote: > On 7/11/19 3:52 PM, Radu Sebastian wrote: > > hello, > > I have downloaded apache-druid from the mirror page and found a mismatch > > when comparing sha256 check sum > > > > oficial download page: > > > https://www.apache.org/dyn/closer.cgi?path=/incubator/druid/0.15.0-incubating/apache-druid-0.15.0-incubating-bin.tar.gz > > sha256 > > mismatch: > http://mirrors.hostingromania.ro/apache.org/incubator/druid/0.15.0-incubating/apache-druid-0.15.0-incubating-bin.tar.gz > > < > http://mirrors.hostingromania.ro/apache.org/incubator/druid/0.15.0-incubating/apache-druid-0.15.0-incubating-bin.tar.gz > > > > > > thank you > > > > > > Hello, Radu. > It appears that this is a SHA512 sum, not a SHA256 sum. > The SHA512 sum is valid, but the filename is wrong. > I've CC'ed the Apache Druid project on this reply, so they are aware of > the mistake. > > With regards, > Daniel on behalf of ASF Infra. > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@druid.apache.org > For additional commands, e-mail: dev-h...@druid.apache.org > >
