You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@maven.apache.org by "Thomas Hallgren (JIRA)" <ji...@codehaus.org> on 2007/02/19 08:15:52 UTC
[jira] Created: (MNG-2833) XMLSchema 1.2 has invalid md5 and sha1
files in Maven2 repository
XMLSchema 1.2 has invalid md5 and sha1 files in Maven2 repository
-----------------------------------------------------------------
Key: MNG-2833
URL: http://jira.codehaus.org/browse/MNG-2833
Project: Maven 2
Issue Type: Bug
Components: Artifacts and Repositories
Affects Versions: 2.0.5
Reporter: Thomas Hallgren
Priority: Critical
The XmlSchema-1.2.jar as published in http://repo1.maven.org/maven2/org/apache/ws/commons/schema/XmlSchema/1.2/ has invalid md5 and sha1 files . Looking at dates it seems it's been replaced some 9 days after the md5 and sha1 was uploaded.
The same file comes with correct md5 and sha1 in the maven 1 repo.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Commented: (MEV-500) XMLSchema 1.2 has invalid md5 and sha1
files in Maven2 repository
Posted by "Carlos Sanchez (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/MEV-500?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_88189 ]
Carlos Sanchez commented on MEV-500:
------------------------------------
You are right.
I've sent an email to the responsible parties:
XmlSchema 1.2 has been released twice to the repository, in m1 and m2 repos, and it's different in each.
http://people.apache.org/repo/m2-ibiblio-rsync-repository/org/apache/ws/commons/schema/XmlSchema/1.2/
http://people.apache.org/repo/m1-ibiblio-rsync-repository/org.apache.ws.commons.schema/jars/
http://www.apache.org/dist/ws/commons/XmlSchema/1_2/
m1 and dist match and were signed by deepal
m2 was released by jochen
I guess the right one is the one in m1 repo.
Central repository has the m1 jar and the m2 signatures
http://repo1.maven.org/maven2/org/apache/ws/commons/schema/XmlSchema/1.2/
Jochen would need to copy the "official" jar and signatures to the m2 apache repo and after that I'll sync the signatures to central.
Please remember to release only once, and put in m1 OR m2 repo.
It's better if it's built with m2 and in the m2 repo.
> XMLSchema 1.2 has invalid md5 and sha1 files in Maven2 repository
> -----------------------------------------------------------------
>
> Key: MEV-500
> URL: http://jira.codehaus.org/browse/MEV-500
> Project: Maven Evangelism
> Issue Type: Bug
> Components: Invalid POM
> Reporter: Thomas Hallgren
> Assigned To: Carlos Sanchez
>
> The XmlSchema-1.2.jar as published in http://repo1.maven.org/maven2/org/apache/ws/commons/schema/XmlSchema/1.2/ has invalid md5 and sha1 files . Looking at dates it seems it's been replaced some 9 days after the md5 and sha1 was uploaded.
> The same file comes with correct md5 and sha1 in the maven 1 repo.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Commented: (MEV-500) XMLSchema 1.2 has invalid md5 and sha1
files in Maven2 repository
Posted by "Thomas Hallgren (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/MEV-500?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_88186 ]
Thomas Hallgren commented on MEV-500:
-------------------------------------
When doing a md5 checksum on
http://repo1.maven.org/maven2/org/apache/ws/commons/schema/XmlSchema/1.2/XmlSchema-1.2.jar
I repeatedly get:
C:\Temp>md5sum.exe XmlSchema-1.2.jar
f8be2fd59a77304b65aec3caeb06927c *XmlSchema-1.2.jar
I've downloaded the file several times, removing it between each attempt. I've also tried a couple of different md5 checksum programs. I get the same result every time. Are you sure you look at the same file?
> XMLSchema 1.2 has invalid md5 and sha1 files in Maven2 repository
> -----------------------------------------------------------------
>
> Key: MEV-500
> URL: http://jira.codehaus.org/browse/MEV-500
> Project: Maven Evangelism
> Issue Type: Bug
> Components: Invalid POM
> Reporter: Thomas Hallgren
> Assigned To: Carlos Sanchez
>
> The XmlSchema-1.2.jar as published in http://repo1.maven.org/maven2/org/apache/ws/commons/schema/XmlSchema/1.2/ has invalid md5 and sha1 files . Looking at dates it seems it's been replaced some 9 days after the md5 and sha1 was uploaded.
> The same file comes with correct md5 and sha1 in the maven 1 repo.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Closed: (MEV-500) XMLSchema 1.2 has invalid md5 and sha1
files in Maven2 repository
Posted by "Carlos Sanchez (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/MEV-500?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Carlos Sanchez closed MEV-500.
------------------------------
Assignee: Carlos Sanchez
Resolution: Cannot Reproduce
Everything looks fine for me
$ md5sum.exe XmlSchema-1.2.jar
4544bacefdaecffc78c6b59aba6f431e *XmlSchema-1.2.jar
$ cat XmlSchema-1.2.jar.md5
4544bacefdaecffc78c6b59aba6f431e
$ sha1sum.exe XmlSchema-1.2.jar
9a3cc2b18276eb4d0cd86b34afe46d3ef23f10e5 *XmlSchema-1.2.jar
$ cat XmlSchema-1.2.jar.sha1
9a3cc2b18276eb4d0cd86b34afe46d3ef23f10e5
$ gpg --verify XmlSchema-1.2.jar.asc
gpg: Signature made 11/14/06 14:09:35 using DSA key ID DE240A64
gpg: Good signature from "Jochen Wiedmann <jo...@apache.org>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 69AF C3E5 65D7 C4FF C6B0 C733 6123 33A3 DE24 0A64
> XMLSchema 1.2 has invalid md5 and sha1 files in Maven2 repository
> -----------------------------------------------------------------
>
> Key: MEV-500
> URL: http://jira.codehaus.org/browse/MEV-500
> Project: Maven Evangelism
> Issue Type: Bug
> Components: Invalid POM
> Reporter: Thomas Hallgren
> Assigned To: Carlos Sanchez
>
> The XmlSchema-1.2.jar as published in http://repo1.maven.org/maven2/org/apache/ws/commons/schema/XmlSchema/1.2/ has invalid md5 and sha1 files . Looking at dates it seems it's been replaced some 9 days after the md5 and sha1 was uploaded.
> The same file comes with correct md5 and sha1 in the maven 1 repo.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Closed: (MEV-500) XMLSchema 1.2 has invalid md5 and sha1
files in Maven2 repository
Posted by "Carlos Sanchez (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/MEV-500?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Carlos Sanchez closed MEV-500.
------------------------------
Resolution: Fixed
Updated checksum and signature from apache after Jochen fixed it there
> XMLSchema 1.2 has invalid md5 and sha1 files in Maven2 repository
> -----------------------------------------------------------------
>
> Key: MEV-500
> URL: http://jira.codehaus.org/browse/MEV-500
> Project: Maven Evangelism
> Issue Type: Bug
> Components: Invalid POM
> Reporter: Thomas Hallgren
> Assigned To: Carlos Sanchez
>
> The XmlSchema-1.2.jar as published in http://repo1.maven.org/maven2/org/apache/ws/commons/schema/XmlSchema/1.2/ has invalid md5 and sha1 files . Looking at dates it seems it's been replaced some 9 days after the md5 and sha1 was uploaded.
> The same file comes with correct md5 and sha1 in the maven 1 repo.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Moved: (MEV-500) XMLSchema 1.2 has invalid md5 and sha1
files in Maven2 repository
Posted by "Carlos Sanchez (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/MEV-500?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Carlos Sanchez moved MNG-2833 to MEV-500:
-----------------------------------------
Priority: (was: Critical)
Affects Version/s: (was: 2.0.5)
Component/s: (was: Artifacts and Repositories)
Invalid POM
Complexity: (was: Intermediate)
Workflow: jira (was: Maven New)
Key: MEV-500 (was: MNG-2833)
Project: Maven Evangelism (was: Maven 2)
> XMLSchema 1.2 has invalid md5 and sha1 files in Maven2 repository
> -----------------------------------------------------------------
>
> Key: MEV-500
> URL: http://jira.codehaus.org/browse/MEV-500
> Project: Maven Evangelism
> Issue Type: Bug
> Components: Invalid POM
> Reporter: Thomas Hallgren
>
> The XmlSchema-1.2.jar as published in http://repo1.maven.org/maven2/org/apache/ws/commons/schema/XmlSchema/1.2/ has invalid md5 and sha1 files . Looking at dates it seems it's been replaced some 9 days after the md5 and sha1 was uploaded.
> The same file comes with correct md5 and sha1 in the maven 1 repo.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Reopened: (MEV-500) XMLSchema 1.2 has invalid md5 and sha1
files in Maven2 repository
Posted by "Carlos Sanchez (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/MEV-500?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Carlos Sanchez reopened MEV-500:
--------------------------------
> XMLSchema 1.2 has invalid md5 and sha1 files in Maven2 repository
> -----------------------------------------------------------------
>
> Key: MEV-500
> URL: http://jira.codehaus.org/browse/MEV-500
> Project: Maven Evangelism
> Issue Type: Bug
> Components: Invalid POM
> Reporter: Thomas Hallgren
> Assigned To: Carlos Sanchez
>
> The XmlSchema-1.2.jar as published in http://repo1.maven.org/maven2/org/apache/ws/commons/schema/XmlSchema/1.2/ has invalid md5 and sha1 files . Looking at dates it seems it's been replaced some 9 days after the md5 and sha1 was uploaded.
> The same file comes with correct md5 and sha1 in the maven 1 repo.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira