Summary: | Provide sha512 checksums for Tomcat releases published to Maven | ||
---|---|---|---|
Product: | Tomcat 9 | Reporter: | Konstantin Kolinko <knst.kolinko> |
Component: | Packaging | Assignee: | Tomcat Developers Mailing List <dev> |
Status: | RESOLVED FIXED | ||
Severity: | normal | ||
Priority: | P2 | ||
Version: | 9.0.x | ||
Target Milestone: | ----- | ||
Hardware: | PC | ||
OS: | All |
Description
Konstantin Kolinko
2018-09-07 14:04:38 UTC
Uploads to RSO are excepted because there is a rule in Nexus staging which checks for files. We need a modification in Nexus and Maven Central to allow SHA256 and SHA512 files. We have already discussed this with Henk Penning. The dist area must contain SHA256/512. This is the INFRA ticket where the Nexus changes are being tracked: https://issues.apache.org/jira/browse/INFRA-14923 I'm marking this issue as NEEDINFO to indicate that progress is paused waiting on an update to that ticket. I've also added myself as a watcher to that ticket so i can follow any progress. The ASF Nexus instance has now been upgraded to allow this. The Tomcat builds have been switched from the unsupported Maven Ant Tasks to the supported Maven Resolver Ant Tasks. Work is in hand to update the Maven Resolver Ant Tasks to create SHA-256 and SHA-512 hashes. We aren't there yet but progress is being made. Maven Resolver Ant Tasks 1.3.0 includes the necessary functionality. Fixed in: - 10.0.x for 10.0.0-M11 onwards - 9.0.x for 9.0.41 onwards - 8.5.x for 8.5.61 onwards - 7.0.x for 7.0.108 onwards |