The discrepancy has been resolved as per the ticket.

On Tue, May 26, 2020 at 10:15 PM Tomo Suzuki <suzt...@google.com> wrote:

> Hi Olivier,
>
> Thank you for your response! I just created a ticket for them:
> https://issues.sonatype.org/browse/MVNCENTRAL-5833
>
> On Sun, May 24, 2020 at 04:56 Olivier Lamy <ol...@apache.org> wrote:
>
>> Maven Central is managed by Sonatype read term of services
>> https://repo1.maven.org/terms.html
>>
>> You should report this issue here
>> https://issues.sonatype.org/projects/MVNCENTRAL
>>
>> On Sat, 23 May 2020 at 02:04, Tomo Suzuki <suzt...@google.com.invalid>
>> wrote:
>>
>> > Hi Maven users,
>> >
>> > Does anyone know why slf4j-jcl-1.0.1's checksum is invalid in Maven
>> > Central?
>> >
>> > I'm investigating the following warning message:
>> >
>> > [WARNING] Could not validate integrity of download from
>> >
>> >
>> https://repo1.maven.org/maven2/org/slf4j/slf4j-jcl/1.0.1/slf4j-jcl-1.0.1.pom
>> > :
>> > Checksum validation failed, expected
>> > 7035ae7774a9a082a316a6943bbad9dfab6319b3 but is
>> > c5c0a3fff6071a4c720f1b7aa1b66cb9d0b26a21
>> >
>> > When I checked
>> >
>> >
>> https://repo1.maven.org/maven2/org/slf4j/slf4j-jcl/1.0.1/slf4j-jcl-1.0.1.pom.sha1
>> > ,
>> > it has
>> >
>> > 7035ae7774a9a082a316a6943bbad9dfab6319b3
>> >
>> >
>> /home/projects/maven/repository-staging/to-ibiblio/maven2/org/slf4j/slf4j-jcl/1.0.1/slf4j-jcl-1.0.1.pom
>> >
>> > However, curl and sha1sum say otherwise:
>> >
>> > suztomo@suztomo:~/spring-cloud-gcp$ curl
>> >
>> >
>> https://repo1.maven.org/maven2/org/slf4j/slf4j-jcl/1.0.1/slf4j-jcl-1.0.1.pom
>> > |sha1sum
>> > <
>> https://repo1.maven.org/maven2/org/slf4j/slf4j-jcl/1.0.1/slf4j-jcl-1.0.1.pom%7Csha1sum
>> >
>> >   % Total    % Received % Xferd  Average Speed   Time    Time     Time
>> >  Current
>> >                                  Dload  Upload   Total   Spent    Left
>> >  Speed
>> > 100   394  100   394    0     0   4061      0 --:--:-- --:--:-- --:--:--
>> >  4104
>> > c5c0a3fff6071a4c720f1b7aa1b66cb9d0b26a21  -
>> >
>> > So from my perspective, the discrepancy is in line with the Maven
>> warning
>> > message. Maven Central is hosting invalid checksum files. Does anyone
>> know
>> > why this discrepancy happens slf4j-jcl-1.0.1?
>> >
>> > --
>> > Regards,
>> > Tomo
>> >
>>
>>
>> --
>> Olivier Lamy
>> http://twitter.com/olamy | http://linkedin.com/in/olamy
>>
>

-- 
Regards,
Tomo

Reply via email to