On 9/19/2018 8:23 AM, Lukasz Lenart wrote:
> Yeah... the sums in Nexus are generated by Nexus, there is an issue
> about generating sums in Nexus 3 - looks like it's a matter of policy
> defined in Nexus what kind of sums to generate. I would not batter
> with this. Anyway, we must provide SHA256/512 sums and we can do it
> once we download the artifacts from Nexus and post them to an Apache
> staging repo. At that point we have all the artifacts locally so we
> can generate proper sums and push them to the repo.
> 
> It's a matter of extending this script
> https://cwiki.apache.org/confluence/display/WW/Building+Struts+2+-+Normal+release#BuildingStruts2-Normalrelease-Movetheassemblies


-1 as I think this will be error prone and hard to do as a manual
procedure (ASF says "For every artifact distributed to the public
through Apache channels" [1] i.e. not only assemblies but also all
artifacts). I would automate it; as maven seems already is able to
generate and deploy SHA256/512 sums (with checksum-maven-plugin's
-DattachChecksums=true). These are what are up to us and Nexus issue
then is not, I think.

Regards.

[1] http://www.apache.org/dev/release-distribution#sigs-and-sums

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional commands, e-mail: dev-h...@struts.apache.org

Reply via email to