Details
-
Improvement
-
Status: Open
-
Minor
-
Resolution: Unresolved
-
None
-
None
-
None
Description
The verification script [1] could use some improvement.
First, the script should not attempt SHA1 or MD5 verification for the ASC files [2].
Second, in my environment at least (Linux), the script will report RAT failures regarding PNG files [3].
Note that the first two issues may be eliminated by appending .asc$ and .png$ to the regular expression on lines 41 and 51 in verify_staged_release.sh. For example:
for i in `find ${DOWNLOAD}/${STAGING} -type f | egrep -v
'.md5$|.sha1$|index.html|maven-metadata.xml|.asc$|.png$'
Finally, there is at least one known case (org.apache.aries.transaction.jdbc) where the verification script will download the SHA1 and MD5 files but not the main file (HTML) which causes failures [4].
[1] http://aries.apache.org/development/verifyingrelease.html