Hello, 

Artifacts http://www.us.apache.org/dist/lucene/solr/4.7.2/ distributed with 
SHA1 hash and .sha1 suffix is used. 

According to http://www.apache.org/dev/release-signing.html#basic-facts 

* An SHA checksum should also be created and must be suffixed .sha 
* SHA-1 should be avoided 

Is this something overlooked? 

Ahmet

Reply via email to