You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@nifi.apache.org by al...@apache.org on 2018/08/17 21:43:00 UTC
svn commit: r1838290 - in /nifi/site/trunk: download.html release-guide.html
Author: alopresto
Date: Fri Aug 17 21:43:00 2018
New Revision: 1838290
URL: http://svn.apache.org/viewvc?rev=1838290&view=rev
Log:
Removed SHA-1 references from Release Guide and Download page per ASF guidance.
Modified:
nifi/site/trunk/download.html
nifi/site/trunk/release-guide.html
Modified: nifi/site/trunk/download.html
URL: http://svn.apache.org/viewvc/nifi/site/trunk/download.html?rev=1838290&r1=1838289&r2=1838290&view=diff
==============================================================================
--- nifi/site/trunk/download.html (original)
+++ nifi/site/trunk/download.html Fri Aug 17 21:43:00 2018
@@ -133,20 +133,20 @@
<li>
Sources:
<ul>
- <li><a href="https://www.apache.org/dyn/closer.lua?path=/nifi/1.7.1/nifi-1.7.1-source-release.zip">nifi-1.7.1-source-release.zip</a> [52 MB] ( <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-1.7.1-source-release.zip.asc">asc</a>, <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-1.7.1-source-release.zip.sha1">sha1</a>, <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-1.7.1-source-release.zip.sha256">sha256</a>, <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-1.7.1-source-release.zip.sha512">sha512</a> )</li>
+ <li><a href="https://www.apache.org/dyn/closer.lua?path=/nifi/1.7.1/nifi-1.7.1-source-release.zip">nifi-1.7.1-source-release.zip</a> [52 MB] ( <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-1.7.1-source-release.zip.asc">asc</a>, <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-1.7.1-source-release.zip.sha256">sha256</a>, <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-1.7.1-source-release.zip.sha512">sha512</a> )</li>
</ul>
</li>
<li>
Binaries
<ul>
- <li><a href="https://www.apache.org/dyn/closer.lua?path=/nifi/1.7.1/nifi-1.7.1-bin.tar.gz">nifi-1.7.1-bin.tar.gz</a> [1.2 GB] ( <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-1.7.1-bin.tar.gz.asc">asc</a>, <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-1.7.1-bin.tar.gz.sha1">sha1</a>, <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-1.7.1-bin.tar.gz.sha256">sha256</a>, <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-1.7.1-bin.tar.gz.sha512">sha512</a> )</li>
+ <li><a href="https://www.apache.org/dyn/closer.lua?path=/nifi/1.7.1/nifi-1.7.1-bin.tar.gz">nifi-1.7.1-bin.tar.gz</a> [1.2 GB] ( <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-1.7.1-bin.tar.gz.asc">asc</a>, <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-1.7.1-bin.tar.gz.sha256">sha256</a>, <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-1.7.1-bin.tar.gz.sha512">sha512</a> )</li>
- <li><a href="https://www.apache.org/dyn/closer.lua?path=/nifi/1.7.1/nifi-1.7.1-bin.zip">nifi-1.7.1-bin.zip</a> [1.2 GB] ( <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-1.7.1-bin.zip.asc">asc</a>, <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-1.7.1-bin.zip.sha1">sha1</a>, <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-1.7.1-bin.zip.sha256">sha256</a>, <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-1.7.1-bin.zip.sha512">sha512</a> )</li>
+ <li><a href="https://www.apache.org/dyn/closer.lua?path=/nifi/1.7.1/nifi-1.7.1-bin.zip">nifi-1.7.1-bin.zip</a> [1.2 GB] ( <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-1.7.1-bin.zip.asc">asc</a>, <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-1.7.1-bin.zip.sha256">sha256</a>, <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-1.7.1-bin.zip.sha512">sha512</a> )</li>
- <li><a href="https://www.apache.org/dyn/closer.lua?path=/nifi/1.7.1/nifi-toolkit-1.7.1-bin.tar.gz">nifi-toolkit-1.7.1-bin.tar.gz</a> [42 MB] ( <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-toolkit-1.7.1-bin.tar.gz.asc">asc</a>, <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-toolkit-1.7.1-bin.tar.gz.sha1">sha1</a>, <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-toolkit-1.7.1-bin.tar.gz.sha256">sha256</a>, <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-toolkit-1.7.1-bin.tar.gz.sha512">sha512</a> )</li>
+ <li><a href="https://www.apache.org/dyn/closer.lua?path=/nifi/1.7.1/nifi-toolkit-1.7.1-bin.tar.gz">nifi-toolkit-1.7.1-bin.tar.gz</a> [42 MB] ( <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-toolkit-1.7.1-bin.tar.gz.asc">asc</a>, <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-toolkit-1.7.1-bin.tar.gz.sha256">sha256</a>, <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-toolkit-1.7.1-bin.tar.gz.sha512">sha512</a> )</li>
- <li><a href="https://www.apache.org/dyn/closer.lua?path=/nifi/1.7.1/nifi-toolkit-1.7.1-bin.zip">nifi-toolkit-1.7.1-bin.zip</a> [42 MB] ( <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-toolkit-1.7.1-bin.zip.asc">asc</a>, <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-toolkit-1.7.1-bin.zip.sha1">sha1</a>, <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-toolkit-1.7.1-bin.zip.sha256">sha256</a>, <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-toolkit-1.7.1-bin.zip.sha512">sha512</a> )</li>
+ <li><a href="https://www.apache.org/dyn/closer.lua?path=/nifi/1.7.1/nifi-toolkit-1.7.1-bin.zip">nifi-toolkit-1.7.1-bin.zip</a> [42 MB] ( <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-toolkit-1.7.1-bin.zip.asc">asc</a>, <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-toolkit-1.7.1-bin.zip.sha256">sha256</a>, <a href="https://www.apache.org/dist/nifi/1.7.1/nifi-toolkit-1.7.1-bin.zip.sha512">sha512</a> )</li>
</ul>
</li>
<li><a href="https://cwiki.apache.org/confluence/display/NIFI/Release+Notes#ReleaseNotes-Version1.7.1">Release Notes</a></li>
@@ -159,20 +159,20 @@
<li>
Sources:
<ul>
- <li><a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-1.6.0-source-release.zip">nifi-1.6.0-source-release.zip</a> [47 MB] ( <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-1.6.0-source-release.zip.asc">asc</a>, <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-1.6.0-source-release.zip.sha1">sha1</a>, <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-1.6.0-source-release.zip.sha256">sha256</a>, <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-1.6.0-source-release.zip.sha512">sha512</a> )</li>
+ <li><a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-1.6.0-source-release.zip">nifi-1.6.0-source-release.zip</a> [47 MB] ( <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-1.6.0-source-release.zip.asc">asc</a>, <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-1.6.0-source-release.zip.sha256">sha256</a>, <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-1.6.0-source-release.zip.sha512">sha512</a> )</li>
</ul>
</li>
<li>
Binaries
<ul>
- <li><a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-1.6.0-bin.tar.gz">nifi-1.6.0-bin.tar.gz</a> [1.2 GB] ( <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-1.6.0-bin.tar.gz.asc">asc</a>, <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-1.6.0-bin.tar.gz.sha1">sha1</a>, <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-1.6.0-bin.tar.gz.sha256">sha256</a>, <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-1.6.0-bin.tar.gz.sha512">sha512</a> )</li>
+ <li><a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-1.6.0-bin.tar.gz">nifi-1.6.0-bin.tar.gz</a> [1.2 GB] ( <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-1.6.0-bin.tar.gz.asc">asc</a>, <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-1.6.0-bin.tar.gz.sha256">sha256</a>, <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-1.6.0-bin.tar.gz.sha512">sha512</a> )</li>
- <li><a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-1.6.0-bin.zip">nifi-1.6.0-bin.zip</a> [1.2 GB] ( <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-1.6.0-bin.zip.asc">asc</a>, <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-1.6.0-bin.zip.sha1">sha1</a>, <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-1.6.0-bin.zip.sha256">sha256</a>, <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-1.6.0-bin.zip.sha512">sha512</a> )</li>
+ <li><a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-1.6.0-bin.zip">nifi-1.6.0-bin.zip</a> [1.2 GB] ( <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-1.6.0-bin.zip.asc">asc</a>, <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-1.6.0-bin.zip.sha256">sha256</a>, <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-1.6.0-bin.zip.sha512">sha512</a> )</li>
- <li><a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-toolkit-1.6.0-bin.tar.gz">nifi-toolkit-1.6.0-bin.tar.gz</a> [42 MB] ( <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-toolkit-1.6.0-bin.tar.gz.asc">asc</a>, <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-toolkit-1.6.0-bin.tar.gz.sha1">sha1</a>, <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-toolkit-1.6.0-bin.tar.gz.sha256">sha256</a>, <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-toolkit-1.6.0-bin.tar.gz.sha512">sha512</a> )</li>
+ <li><a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-toolkit-1.6.0-bin.tar.gz">nifi-toolkit-1.6.0-bin.tar.gz</a> [42 MB] ( <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-toolkit-1.6.0-bin.tar.gz.asc">asc</a>, <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-toolkit-1.6.0-bin.tar.gz.sha256">sha256</a>, <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-toolkit-1.6.0-bin.tar.gz.sha512">sha512</a> )</li>
- <li><a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-toolkit-1.6.0-bin.zip">nifi-toolkit-1.6.0-bin.zip</a> [42 MB] ( <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-toolkit-1.6.0-bin.zip.asc">asc</a>, <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-toolkit-1.6.0-bin.zip.sha1">sha1</a>, <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-toolkit-1.6.0-bin.zip.sha256">sha256</a>, <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-toolkit-1.6.0-bin.zip.sha512">sha512</a> )</li>
+ <li><a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-toolkit-1.6.0-bin.zip">nifi-toolkit-1.6.0-bin.zip</a> [42 MB] ( <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-toolkit-1.6.0-bin.zip.asc">asc</a>, <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-toolkit-1.6.0-bin.zip.sha256">sha256</a>, <a href="https://archive.apache.org/dist/nifi/1.6.0/nifi-toolkit-1.6.0-bin.zip.sha512">sha512</a> )</li>
</ul>
</li>
<li><a href="https://cwiki.apache.org/confluence/display/NIFI/Release+Notes#ReleaseNotes-Version1.6.0">Release Notes</a></li>
Modified: nifi/site/trunk/release-guide.html
URL: http://svn.apache.org/viewvc/nifi/site/trunk/release-guide.html?rev=1838290&r1=1838289&r2=1838290&view=diff
==============================================================================
--- nifi/site/trunk/release-guide.html (original)
+++ nifi/site/trunk/release-guide.html Fri Aug 17 21:43:00 2018
@@ -212,7 +212,6 @@ present at the root of the archive.</li>
<li>Are the signatures and hashes correct for the source release?
<ul>
<li>Validate the hashes of the sources artifact do in fact match:<br>
-<code>https://repository.apache.org/content/repositories/${STAGING_REPO_ID}/org/apache/nifi/nifi/${NIFI_VERSION}/nifi-${NIFI_VERSION}-source-release.zip.sha1</code><br>
<code>https://repository.apache.org/content/repositories/${STAGING_REPO_ID}/org/apache/nifi/nifi/${NIFI_VERSION}/nifi-${NIFI_VERSION}-source-release.zip.sha256</code><br>
<code>https://repository.apache.org/content/repositories/${STAGING_REPO_ID}/org/apache/nifi/nifi/${NIFI_VERSION}/nifi-${NIFI_VERSION}-source-release.zip.sha512</code></li>
<li>Validate the signature of the source artifact. Here is an example path:<br>
@@ -360,13 +359,6 @@ $ gpg -a -b --digest-algo=SHA512 nifi-${
$ gpg -a -b --digest-algo=SHA512 nifi-toolkit-${NIFI_VERSION}-bin.zip # produces nifi-toolkit-${NIFI_VERSION}-bin.zip.asc
$ gpg -a -b --digest-algo=SHA512 nifi-toolkit-${NIFI_VERSION}-bin.tar.gz # produces nifi-toolkit-${NIFI_VERSION}-bin.tar.gz.asc
</code></pre></li>
-<li>Generate SHA1 hash summaries.
-<pre><code>$ shasum -a 1 nifi-${NIFI_VERSION}-source-release.zip | cut -d" " -f1 > nifi-${NIFI_VERSION}-source-release.zip.sha1
-$ shasum -a 1 nifi-${NIFI_VERSION}-bin.tar.gz | cut -d" " -f1 > nifi-${NIFI_VERSION}-bin.tar.gz.sha1
-$ shasum -a 1 nifi-${NIFI_VERSION}-bin.zip | cut -d" " -f1 > nifi-${NIFI_VERSION}-bin.zip.sha1
-$ shasum -a 1 nifi-toolkit-${NIFI_VERSION}-bin.zip | cut -d" " -f1 > nifi--toolkit${NIFI_VERSION}-bin.zip.sha1
-$ shasum -a 1 nifi-toolkit-${NIFI_VERSION}-bin.tar.gz | cut -d" " -f1 > nifi-toolkit-${NIFI_VERSION}-bin.tar.gz.sha1
-</code></pre></li>
<li>Generate SHA256 hash summaries.
<pre><code>$ shasum -a 256 nifi-${NIFI_VERSION}-source-release.zip | cut -d" " -f1 > nifi-${NIFI_VERSION}-source-release.zip.sha256
$ shasum -a 256 nifi-${NIFI_VERSION}-bin.tar.gz | cut -d" " -f1 > nifi-${NIFI_VERSION}-bin.tar.gz.sha256
@@ -419,7 +411,6 @@ The Git commit ID is ${RC_TAG_COMMIT_ID}
https://git-wip-us.apache.org/repos/asf?p=nifi.git;a=commit;h=${RC_TAG_COMMIT_ID}
Checksums of nifi-x.y.z-source-release.zip:
-SHA1: <40-BYTE-SHA1SUM-HASH>
SHA256: <64-CHAR-SHA256SUM-HASH>
SHA512: <128-CHAR-SHA512SUM-HASH>
@@ -465,15 +456,13 @@ gpg --import KEYS
wget https://dist.apache.org/repos/dist/dev/nifi/nifi-${NIFI_VERSION}/nifi-${NIFI_VERSION}-source-release.zip
wget https://dist.apache.org/repos/dist/dev/nifi/nifi-${NIFI_VERSION}/nifi-${NIFI_VERSION}-source-release.zip.asc
-wget https://dist.apache.org/repos/dist/dev/nifi/nifi-${NIFI_VERSION}/nifi-${NIFI_VERSION}-source-release.zip.sha1
wget https://dist.apache.org/repos/dist/dev/nifi/nifi-${NIFI_VERSION}/nifi-${NIFI_VERSION}-source-release.zip.sha256
wget https://dist.apache.org/repos/dist/dev/nifi/nifi-${NIFI_VERSION}/nifi-${NIFI_VERSION}-source-release.zip.sha512
# Verify the signature
gpg --verify nifi-${NIFI_VERSION}-source-release.zip.asc
-# Verify the hashes (sha1, sha256, sha512) match the source and what was provided in the vote email thread
-shasum -a 1 nifi-${NIFI_VERSION}-source-release.zip
+# Verify the hashes (sha256, sha512) match the source and what was provided in the vote email thread
shasum -a 256 nifi-${NIFI_VERSION}-source-release.zip
shasum -a 512 nifi-${NIFI_VERSION}-source-release.zip