[MNG-339] improve checksum handling

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.0-alpha-3
• Component/s: Artifacts and Repositories
• Assignee: John Dennis Casey
• Reporter: Brett Porter
• Created: 21/Apr/05 10:55
• Updated: 27/Aug/13 11:22
• Resolved: 20/Jun/05 13:54

Description

presently, missing or invalid checksums are just warned on. sha1 and md5 are always uploaded.

• Need to pick one or the other for a repository (might choose to upload both, though probably not worth testing both on the way down)
• Need a way to specify a master override (command line) to turn off strict checking of things like this and anything else (eg skip bad transitive deps) **
• Might want to retry on failure?

• • had a discussion about this and it seems better to do this than to allow it to be specified in the project, to encourage those that have bad metadata to fix it. Need to still reassess the impact on the user, but we are in a position to make sure repo1 is verified and its integrity is maintained.