Re: Formats of SHA/MD5 checksums

2012-12-02 Thread Henk P. Penning
On Fri, 30 Nov 2012, Roman Shaposhnik wrote: Date: Fri, 30 Nov 2012 03:05:15 +0100 From: Roman Shaposhnik r...@apache.org To: general@incubator.apache.org, infrastruct...@apache.org Subject: Re: Formats of SHA/MD5 checksums Sender: shaposh...@gmail.com On Sun, Nov 25, 2012 at 9:29 PM, Roman

Re: Formats of SHA/MD5 checksums

2012-12-02 Thread Mark Thomas
Roman Shaposhnik r...@apache.org wrote: +infra Ping! I would really like this annoyance to be resolved one way or the other. Could somebody more experienced with Apache web properties answer the question? Question: how do we go

Re: Formats of SHA/MD5 checksums

2012-12-02 Thread Jake Farrell
That page is part of the Apache CMS and ASF members can edit that page by using the following http://www.apache.org/dev/cms.html#usage. Non ASF members can create a ticket within jira under the infra project and attach a patch for the changes they would like to make. The repo and file you

Re: Formats of SHA/MD5 checksums

2012-11-30 Thread Daniel Shahaf
Henk P. Penning wrote on Fri, Nov 30, 2012 at 10:08:33 +0100: The reason given I ended up writing a Perl script doesn't make sense ; .md5 files come in many forms but the algorithm to verify is the same for all of them (there are no 'variations.') : verify (checksum md5, .md5-file

Re: Formats of SHA/MD5 checksums

2012-11-30 Thread Daniel Shahaf
Jake Farrell wrote on Thu, Nov 29, 2012 at 22:02:16 -0500: That page is part of the Apache CMS and ASF members can edit that page by using the following http://www.apache.org/dev/cms.html#usage. Non ASF members can create a ticket within jira under the infra project and attach a patch

Re: Formats of SHA/MD5 checksums

2012-11-30 Thread Daniel Shahaf
Daniel Shahaf wrote on Sat, Dec 01, 2012 at 07:25:54 +0200: Jake Farrell wrote on Thu, Nov 29, 2012 at 22:02:16 -0500: That page is part of the Apache CMS and ASF members can edit that page by using the following http://www.apache.org/dev/cms.html#usage. Non ASF members can create a

Re: Formats of SHA/MD5 checksums

2012-11-30 Thread Roman Shaposhnik
On Fri, Nov 30, 2012 at 1:08 AM, Henk P. Penning penn...@uu.nl wrote: I am +1 on suggesting (on that page) a 'normal' form for the content of a .md5 file. I'll take a crack at it now that I know where the source is ;-) I am definitedly -1 on removing the gpg line above, or suggesting

Re: Formats of SHA/MD5 checksums

2012-11-30 Thread Roman Shaposhnik
On Thu, Nov 29, 2012 at 11:49 PM, Mark Thomas ma...@apache.org wrote: Releases and new committers are pretty much the only time I'd expect to see votes in an Apache community. Understood. My question was specifically about the process used by ASF to manage its top level web pages. Now I know.

Re: Formats of SHA/MD5 checksums

2012-11-29 Thread Alexander Broekhuis
Hi all, Question: how do we go about discouraging it then? Do we need a vote to modify the content of: http://www.apache.org/dev/release-signing#md5 I am fine with a change of the format. But at the moment we (Celix) still have a pending release. Seeing that many other project use

Re: Formats of SHA/MD5 checksums

2012-11-29 Thread Roman Shaposhnik
On Thu, Nov 29, 2012 at 12:12 AM, Alexander Broekhuis a.broekh...@gmail.com wrote: I am fine with a change of the format. But at the moment we (Celix) still have a pending release. Seeing that many other project use different formats, I personally don't see this as a show stopper for our

Re: Formats of SHA/MD5 checksums

2012-11-29 Thread Roman Shaposhnik
+infra Ping! I would really like this annoyance to be resolved one way or the other. Could somebody more experienced with Apache web properties answer the question? Question: how do we go about discouraging it then? Do we need a vote

Re: Formats of SHA/MD5 checksums

2012-11-29 Thread Marcel Offermans
On Nov 30, 2012, at 3:03 AM, Roman Shaposhnik r...@apache.org wrote: On Thu, Nov 29, 2012 at 12:12 AM, Alexander Broekhuis a.broekh...@gmail.com wrote: I am fine with a change of the format. But at the moment we (Celix) still have a pending release. Seeing that many other project use

Re: Formats of SHA/MD5 checksums

2012-11-29 Thread Alexander Broekhuis
Hi, I think that would be a fine choice. I'm fine with releasing it as is for now +1 (binding). Thanks! Could you post your vote to the formal release thread as well? That said -- I'd like to see the next release take into account the feedback that has been provided to the project so

Re: Formats of SHA/MD5 checksums

2012-11-29 Thread Daniel Shahaf
Roman Shaposhnik wrote on Thu, Nov 29, 2012 at 18:05:15 -0800: +infra Ping! I would really like this annoyance to be resolved one way or the other. Could somebody more experienced with Apache web properties answer the question?

Re: Formats of SHA/MD5 checksums

2012-11-25 Thread Roman Shaposhnik
On Tue, Nov 20, 2012 at 3:50 PM, sebb seb...@gmail.com wrote: Personally, I find it difficult to verify the GPG generated checksums. Ditto. It's particularly awkward when the hash is wrapped over several lines. I ended up writing a Perl script to handle all the variations. If I'm not alone

Formats of SHA/MD5 checksums

2012-11-20 Thread Roman Shaposhnik
Hi! while reviewing Celix RC I came across a peculiar format for the SHA/MD5 checksums which I've never seen before: https://dist.apache.org/repos/dist/dev/incubator/celix/celix-0.0.1-incubating/ Turns out, this is the output of gpg and it seems that there's no way to ask gpg to verify it

Re: Formats of SHA/MD5 checksums

2012-11-20 Thread Alexander Broekhuis
Hi all, while reviewing Celix RC I came across a peculiar format for the SHA/MD5 checksums which I've never seen before: https://dist.apache.org/repos/dist/dev/incubator/celix/celix-0.0.1-incubating/ There are several other projects who do use the same tools. Cloudstack even list on their

Re: Formats of SHA/MD5 checksums

2012-11-20 Thread Roman Shaposhnik
On Tue, Nov 20, 2012 at 12:27 PM, Ted Dunning ted.dunn...@gmail.com wrote: What does gpg --verify do? http://www.gnupg.org/download/integrity_check.en.html It verifies the GPG sig (as it should). I wasn't able to find (well, by spending 2 minutes searching through the man page on my Linux) an

Re: Formats of SHA/MD5 checksums

2012-11-20 Thread Marvin Humphrey
On Tue, Nov 20, 2012 at 12:22 PM, Roman Shaposhnik r...@apache.org wrote: Hi! while reviewing Celix RC I came across a peculiar format for the SHA/MD5 checksums which I've never seen before: https://dist.apache.org/repos/dist/dev/incubator/celix/celix-0.0.1-incubating/ Turns out, this

Re: Formats of SHA/MD5 checksums

2012-11-20 Thread Roman Shaposhnik
On Tue, Nov 20, 2012 at 1:51 PM, sebb seb...@gmail.com wrote: (Though installing it just for hash creation may be overkill). Maven generates hashes which are easy to check. It's easy to use Ant to generate hashes in a suitable format. And this is the crux of the question -- what IS suitable

Re: Formats of SHA/MD5 checksums

2012-11-20 Thread sebb
On 20 November 2012 23:22, Roman Shaposhnik r...@apache.org wrote: On Tue, Nov 20, 2012 at 1:51 PM, sebb seb...@gmail.com wrote: (Though installing it just for hash creation may be overkill). Maven generates hashes which are easy to check. It's easy to use Ant to generate hashes in a suitable