[UIMA-5856] Use modern checksum algorithms during release

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: parent-pom-12
• Component/s: Build, Packaging and Test, Website
• Assignee: Richard Eckart de Castilho
• Reporter: Richard Eckart de Castilho
• Created: 18/Aug/18 09:06
• Updated: 17/Oct/18 20:22
• Resolved: 02/Oct/18 11:20

Description

Apache policy requires that we drop generating MD5 / SHA1 checksums and switch:

– for new releases :
– you MUST supply a SHA-256 and/or SHA-512 file
– you SHOULD NOT supply MD5 or SHA-1 files
See http://www.apache.org/dev/release-distribution#sigs-and-sums

Best place to do this would be the parent-pom.

Its a bit of a blocker for producing any new releases unless sub-projects override all the code-signing provisions in the UIMA parent pom.

Issue Links

• supercedes: UIMA-5739 Update UIMA-wide build pom to reflect change in MD5 policy