The discrepancy has been resolved as per the ticket. On Tue, May 26, 2020 at 10:15 PM Tomo Suzuki <suzt...@google.com> wrote:
> Hi Olivier, > > Thank you for your response! I just created a ticket for them: > https://issues.sonatype.org/browse/MVNCENTRAL-5833 > > On Sun, May 24, 2020 at 04:56 Olivier Lamy <ol...@apache.org> wrote: > >> Maven Central is managed by Sonatype read term of services >> https://repo1.maven.org/terms.html >> >> You should report this issue here >> https://issues.sonatype.org/projects/MVNCENTRAL >> >> On Sat, 23 May 2020 at 02:04, Tomo Suzuki <suzt...@google.com.invalid> >> wrote: >> >> > Hi Maven users, >> > >> > Does anyone know why slf4j-jcl-1.0.1's checksum is invalid in Maven >> > Central? >> > >> > I'm investigating the following warning message: >> > >> > [WARNING] Could not validate integrity of download from >> > >> > >> https://repo1.maven.org/maven2/org/slf4j/slf4j-jcl/1.0.1/slf4j-jcl-1.0.1.pom >> > : >> > Checksum validation failed, expected >> > 7035ae7774a9a082a316a6943bbad9dfab6319b3 but is >> > c5c0a3fff6071a4c720f1b7aa1b66cb9d0b26a21 >> > >> > When I checked >> > >> > >> https://repo1.maven.org/maven2/org/slf4j/slf4j-jcl/1.0.1/slf4j-jcl-1.0.1.pom.sha1 >> > , >> > it has >> > >> > 7035ae7774a9a082a316a6943bbad9dfab6319b3 >> > >> > >> /home/projects/maven/repository-staging/to-ibiblio/maven2/org/slf4j/slf4j-jcl/1.0.1/slf4j-jcl-1.0.1.pom >> > >> > However, curl and sha1sum say otherwise: >> > >> > suztomo@suztomo:~/spring-cloud-gcp$ curl >> > >> > >> https://repo1.maven.org/maven2/org/slf4j/slf4j-jcl/1.0.1/slf4j-jcl-1.0.1.pom >> > |sha1sum >> > < >> https://repo1.maven.org/maven2/org/slf4j/slf4j-jcl/1.0.1/slf4j-jcl-1.0.1.pom%7Csha1sum >> > >> > % Total % Received % Xferd Average Speed Time Time Time >> > Current >> > Dload Upload Total Spent Left >> > Speed >> > 100 394 100 394 0 0 4061 0 --:--:-- --:--:-- --:--:-- >> > 4104 >> > c5c0a3fff6071a4c720f1b7aa1b66cb9d0b26a21 - >> > >> > So from my perspective, the discrepancy is in line with the Maven >> warning >> > message. Maven Central is hosting invalid checksum files. Does anyone >> know >> > why this discrepancy happens slf4j-jcl-1.0.1? >> > >> > -- >> > Regards, >> > Tomo >> > >> >> >> -- >> Olivier Lamy >> http://twitter.com/olamy | http://linkedin.com/in/olamy >> > -- Regards, Tomo
