On 9/19/2018 8:23 AM, Lukasz Lenart wrote: > Yeah... the sums in Nexus are generated by Nexus, there is an issue > about generating sums in Nexus 3 - looks like it's a matter of policy > defined in Nexus what kind of sums to generate. I would not batter > with this. Anyway, we must provide SHA256/512 sums and we can do it > once we download the artifacts from Nexus and post them to an Apache > staging repo. At that point we have all the artifacts locally so we > can generate proper sums and push them to the repo. > > It's a matter of extending this script > https://cwiki.apache.org/confluence/display/WW/Building+Struts+2+-+Normal+release#BuildingStruts2-Normalrelease-Movetheassemblies
-1 as I think this will be error prone and hard to do as a manual procedure (ASF says "For every artifact distributed to the public through Apache channels" [1] i.e. not only assemblies but also all artifacts). I would automate it; as maven seems already is able to generate and deploy SHA256/512 sums (with checksum-maven-plugin's -DattachChecksums=true). These are what are up to us and Nexus issue then is not, I think. Regards. [1] http://www.apache.org/dev/release-distribution#sigs-and-sums --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org For additional commands, e-mail: dev-h...@struts.apache.org