Besides, my current experiments with gnu md5sum (2.0.21) show that the sum's on the Maven contents arn't verifyable to any other tool but the maven checksum plugin.

If they aren't verifiable to extenral tools thats a bad situation. I'm going to bring this up on the Maven list too.

http://www.faqs.org/rfcs/rfc1321.html

A hard fast "dig" through the RFC suggests a loophole here as there is no reference to what the contents of a md5 signature fle should look like. Seems more of a inherant "suggestion" in the implementation itself.

-Mark

Mark R. Diggory wrote:

Its a tough call, is there any "standard" for the structure of the md5 contents out there? I think the Maven team would be keen to play along with a standard and yet play along with any configurability as well.

-Mark Diggory

Markus M. May wrote:

Adam is perfectly right about this stuff. There is one more thing we need to
think about. Some repositories treat md5-files different. The structure on
apache.org is [filename - MD5 Hash]. But on ibiblio (maven-repository) it is
just [MD5 Hash]. So this needs to be somehow configurable.
One more thing to think about :-)

-- Mark Diggory Software Developer Harvard MIT Data Center http://www.hmdc.harvard.edu

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Reply via email to