[CALCITE-1972] Create .sha512 and .md5 digests for release artifacts

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.14.0
• Assignee: Michael Mior
• Reporter: Julian Hyde
• Created: 30/Aug/17 20:51
• Updated: 02/Oct/17 14:31
• Resolved: 04/Sep/17 14:58

Description

Following CALCITE-1329 we currently generate a .mds file containing multiple digests, but breaches Apache policy for the file names that can be generated. We should instead generate a file with .sha512 suffix containing a SHA512 digest.

No need to generate MD5 or SHA1; these are no longer secure.

Steps:

• in pom.xml, modify the checksum-maven-plugin configuration;
• in HOWTO.md, remove the steps to generate the .mds file;
• in site/downloads/index.md, modify the "assign digest" logic for releases 1.14 and later.

Issue Links

• blocks: CALCITE-1970 Release Calcite 1.14.0