You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@activemq.apache.org by "Sebb (Jira)" <ji...@apache.org> on 2021/08/28 15:46:00 UTC

[jira] [Closed] (AMQ-8357) Download page for 5.16.3 refers to MD5; must not link to Git

     [ https://issues.apache.org/jira/browse/AMQ-8357?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Sebb closed AMQ-8357.
---------------------

Thanks, looks OK now

> Download page for 5.16.3 refers to MD5; must not link to Git
> ------------------------------------------------------------
>
>                 Key: AMQ-8357
>                 URL: https://issues.apache.org/jira/browse/AMQ-8357
>             Project: ActiveMQ
>          Issue Type: Bug
>            Reporter: Sebb
>            Assignee: Jean-Baptiste Onofré
>            Priority: Major
>
> The download page [1] refers several times to MD5. Such hashes are deprecated, and are not actually used by AMQ any more.
> Please update the instructions so that they can be used by downloaders.
> Also Git repos must not be linked from download pages, as they contain code that has not been formally released.
> Note also that MD5 is not a signature (nor are SHA*) - they are hashes.
> The PGP asc file is a signature.
> [1] https://activemq.apache.org/activemq-5016003-release



--
This message was sent by Atlassian Jira
(v8.3.4#803005)