juneau-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From James Bognar <jamesbog...@apache.org>
Subject Re: Quick question...checksums?
Date Mon, 17 Sep 2018 17:52:14 GMT
I think I'm confused.

The checksums in the release are "*.md5" and "*.sha1":
https://repository.apache.org/content/repositories/orgapachejuneau-1022/org/apache/juneau/juneau-all/7.2.0/

Are the "*.sha1" files using SHA-1 or SHA-256/512?  I can't tell other than
by the file names.

Our keys are here:
https://people.apache.org/keys/group/juneau.asc



On Mon, Sep 17, 2018 at 1:25 PM Gary Gregory <garydgregory@gmail.com> wrote:

> You must NOT ship SHA1! Only SHA-256 or 512.
>
> Gary
>
> On Mon, Sep 17, 2018 at 11:21 AM James Bognar <jamesbognar@apache.org>
> wrote:
>
>> I believe they mentioned on the general mailing list that you only need
>> to ship SHA-1 checksums and not ASC or MD5.  Can I get a quick confirmation
>> on that?
>>
>

Mime
View raw message