[MRESOLVER-242] When no remote checksums provided by layout, transfer inevitably fails/warns

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.8.0
• Assignee: Tamas Cservenak
• Reporter: Tamas Cservenak
• Created: 22/Feb/22 09:35
• Updated: 15/Mar/22 13:13
• Resolved: 15/Mar/22 13:12

Description

On remote transfer, if layout does not provide remote checksums (as Javadoc states: it MAY return empty collection), remote transfer either WARNs or fails (if repository policy is WARN of FAIL respectively) always. This is wrong IMHO.
OTOH, layout intentionally does not return remote checksums in some cases, like GPG signature is, if the default Maven2RepositoryLayoutEx is used.

Hence, this causes that (sub)artifacts like checksums and signatures are NOT resolvable using resolver, due that above (they are deemed to always fail).

Hence, a proposed solution is:

• change of semantics: when layout does not provide remote checksums, skip checksum validation of remote checksums (as there is no such thing as "checksum of a checksum" or in many cases "checksum of a signature").
• make resolver layout extensible re "artifacts with omitted checksums" instead to have baked in only one extension: .asc

Issue Links

• causes: MRESOLVER-236 Make it possible to resolve .asc on a 'fail' <checksumPolicy/> respository.
• links to: PR #154