Uploaded image for project: 'Lucene - Core'
  1. Lucene - Core
  2. LUCENE-8493

Stop publishing .sha1 files with releases

    XMLWordPrintableJSON

    Details

    • Lucene Fields:
      New

      Description

      In LUCENE-7935 we added .sha512 checksums to releases and removed .md5 files.

      According to the Release Distribution Policy (http://www.apache.org/dev/release-distribution#sigs-and-sums):

      For every artifact distributed to the public through Apache channels, the PMC

      MUST supply a valid OpenPGP-compatible ASCII-armored detached signature file
      MUST supply at least one checksum file
      SHOULD supply a SHA-256 and/or SHA-512 checksum file
      SHOULD NOT supply a MD5 or SHA-1 checksum file (because these are deprecated)

      So this Jira will stop publishing .sha1 files, leaving only the .sha512

        Attachments

        1. LUCENE-8493.patch
          8 kB
          Jan Høydahl

          Issue Links

            Activity

              People

              • Assignee:
                janhoy Jan Høydahl
                Reporter:
                janhoy Jan Høydahl
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: