[
https://issues.apache.org/jira/browse/SLING-7534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16436956#comment-16436956
]
Bertrand Delacretaz edited comment on SLING-7534 at 4/13/18 7:35 AM:
---------------------------------------------------------------------
As per discussion at [1], it looks like it's indeed {{maven-deploy-plugin}}
which generates the checksum files - although I don't see a mention of
checksums in the docs at
[http://maven.apache.org/plugins/maven-deploy-plugin/deploy-mojo.html] so I'm
still a bit skeptical.
However in INFRA-14923 and at [1] Brian Fox says that getting rid of {{.md5}}
requires Nexus code changes.
I suggest that we wait for INFRA-14923 to be clarified, nothing's urgent.
[1]
[https://lists.apache.org/thread.html/c50e4842dbbe13b8196a43fa76d6040f8971bc5e812b561d080c5776@%3Cusers.infra.apache.org%3E]
was (Author: bdelacretaz):
As per discussion at [1], it looks like it's indeed {{maven-deploy-plugin}}
which generates the checksum files.
However in INFRA-14923 and at [1] Brian Fox says that getting rid of {{.md5}}
requires Nexus code changes.
I suggest that we wait for INFRA-14923 to be clarified, nothing's urgent.
[1]
https://lists.apache.org/thread.html/c50e4842dbbe13b8196a43fa76d6040f8971bc5e812b561d080c5776@%3Cusers.infra.apache.org%3E
> Release policy - stop providing MD5 signatures
> ----------------------------------------------
>
> Key: SLING-7534
> URL: https://issues.apache.org/jira/browse/SLING-7534
> Project: Sling
> Issue Type: Task
> Components: Tooling
> Reporter: Robert Munteanu
> Priority: Major
>
> See http://www.apache.org/dev/release-distribution#sigs-and-sums , we SHOULD
> no longer provide MD5 checksums for new releases.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
