[INFRA-14923] Add new SHA-* rules to Nexus staging

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Component/s: Nexus
• Project: POI
• Assignee: Brian E Fox
• Reporter: Andreas Beeker
• Created: 21/Aug/17 23:06
• Updated: 22/May/20 00:39
• Resolved: 22/May/20 00:39

Description

Currently .sha256/.sha512 [1] aren't recognized as checksums when uploading to Nexus, therefore the staging rules need to be updated.

[1] http://www.apache.org/dev/release-distribution#sigs-and-sums


Error when uploading to nexus:

Error while trying to close staging repository with ID "orgapachepoi-1144".

Nexus Staging Rules Failure Report
==================================

Repository "orgapachepoi-1144" failures
  Rule "checksum-staging" failures
    * Missing SHA1: '/org/apache/poi/poi/3.17/poi-3.17.pom.sha512.sha1'
    * Missing MD5: '/org/apache/poi/poi/3.17/poi-3.17.pom.sha512.md5'
    * Missing SHA1: '/org/apache/poi/poi/3.17/poi-3.17-javadoc.jar.sha512.sha1'
    * Missing MD5: '/org/apache/poi/poi/3.17/poi-3.17-javadoc.jar.sha512.md5'
    * Missing SHA1: '/org/apache/poi/poi/3.17/poi-3.17-sources.jar.sha512.sha1'
    * Missing MD5: '/org/apache/poi/poi/3.17/poi-3.17-sources.jar.sha512.md5'
    * Missing SHA1: '/org/apache/poi/poi/3.17/poi-3.17.jar.sha512.sha1'
    * Missing MD5: '/org/apache/poi/poi/3.17/poi-3.17.jar.sha512.md5'
  Rule "signature-staging" failures
    * Missing Signature: '/org/apache/poi/poi/3.17/poi-3.17.pom.sha512.asc' does not exist for 'poi-3.17.pom.sha512'.
    * Missing Signature: '/org/apache/poi/poi/3.17/poi-3.17-javadoc.jar.sha512.asc' does not exist for 'poi-3.17-javadoc.jar.sha512'.
    * Missing Signature: '/org/apache/poi/poi/3.17/poi-3.17-sources.jar.sha512.asc' does not exist for 'poi-3.17-sources.jar.sha512'.
    * Missing Signature: '/org/apache/poi/poi/3.17/poi-3.17.jar.sha512.asc' does not exist for 'poi-3.17.jar.sha512'.


Dropping failed staging repository with ID "orgapachepoi-1144".

Waiting for operation to complete...
.
.

Issue Links

• is duplicated by: INFRA-16169 Nexus staging repo validations failing for SHA512 checksums
• is required by: CASSANDRA-14970 New releases must supply SHA-256 and/or SHA-512 checksums
• is required by: MRESOLVER-56 Support SHA-256 and SHA-512 as checksums
• relates to: SLING-7534 Release policy - stop providing MD5 and start providing SHA-512 signatures
• links to: MVNCENTRAL-5276