[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: New release distribution checksum policy

On 24.08.18 15:42, sebb wrote:
> If it really is the case that the Apache Parent POM only creates the
> checksums for artifacts with a specific name, then IMO it is badly
> broken and needs a bug report.

Feel free. Lines 425 to 454.

> Note that it says:
> "For every artifact distributed to the public through Apache channels,
> the PMC..."
> Since we distribute the binaries, they must have SHA256+

I see. Does Maven Central qualify as "Apache channel"? Because I have no
idea how to achieve this. Tried multiple configurations - PITA.

Bye, Thomas

To unsubscribe, e-mail: dev-unsubscribe@xxxxxxxxxxxxxxxxxx
For additional commands, e-mail: dev-help@xxxxxxxxxxxxxxxxxx