Uploaded image for project: 'UIMA'
  1. UIMA
  2. UIMA-5856

Use modern checksum algorithms during release

Agile BoardAttach filesAttach ScreenshotVotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    Description

      Apache policy requires that we drop generating MD5 / SHA1 checksums and switch:

      – for new releases :
      – you MUST supply a SHA-256 and/or SHA-512 file
      – you SHOULD NOT supply MD5 or SHA-1 files
      See http://www.apache.org/dev/release-distribution#sigs-and-sums

      Best place to do this would be the parent-pom.

      Its a bit of a blocker for producing any new releases unless sub-projects override all the code-signing provisions in the UIMA parent pom.

      Attachments

        Issue Links

        Activity

          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            rec Richard Eckart de Castilho
            rec Richard Eckart de Castilho
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Issue deployment