You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@maven.apache.org by Julien HENRY <he...@yahoo.fr> on 2011/07/21 11:09:39 UTC
Synchro issue between codehaus and central?
Hi,
I have a problem using org.codehaus.sonar-plugins.pdf-report:maven-pdfreport-plugin:1.2. Nexus refuses to download the pom because md5 checksum doesn't match. I did some tests, and here are my results:
Central [1] :
- md5sum computed on downloaded pom = cd3e130dd8aee58484e1ab6d1817f0e0
- in .md5 file = 4b720e4669f09b336e08abe34b2bf546
Codehaus [2] :
- md5sum computed ondownloaded pom = c9181c76ae57cdd343a8f65a95f94c58
- in .md5 file = 4a932f26a7904e187b53d92c7ccdaca5
According to modification date I suspect the codehaus file was re uploaded after the synchro was done on central. Does it mean codehaus allow redeploy of released artifacts? Can you confirm the md5 in .md5 files are wrong (it could be a bad joke of my corporate proxy) and if this is the case can someone fix it on central.
The diff between the poms from central and codehaus show only a difference on the spanish "í" vs "i":
> diff maven-pdfreport-plugin-1.2.pom maven-pdfreport-plugin-1.2-codehaus.pom
5c5
< * Copyright (C) 2010 klicap - ingeniería del puzle
---
> * Copyright (C) 2010 klicap - ingenieria del puzle
123c123
< <Developed-by>klicap - ingeniería del puzle</Developed-by>
---
> <Developed-by>klicap - ingenieria del puzle</Developed-by>
I will try to download the JAR and check if they are the same.
Regards,
[1] http://repo1.maven.org/maven2/org/codehaus/sonar-plugins/pdf-report/maven-pdfreport-plugin/1.2/
[2] http://repository.codehaus.org/org/codehaus/sonar-plugins/pdf-report/maven-pdfreport-plugin/1.2/
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
For additional commands, e-mail: users-help@maven.apache.org
Re: Synchro issue between codehaus and central?
Posted by Juven Xu <ju...@sonatype.com>.
fyi, since sonar is migrated from the old codehaus repository to
https://nexus.codehaus.org/, we now can guarantee that there won't be any
broken checksum of sonar artifacts deployed to central.
Nexus Pro has staging rules checking this, and it's very handy to fix
existing broken checksum, just run a rebuild maven metadata task.
On Fri, Jul 22, 2011 at 2:55 AM, Anders Hammar <an...@hammar.net> wrote:
> http://repository.codehaus.org/ is an old repo at Codehaus that is not
> controlled by Nexus. Thus, I believe it is possible to redeploy or do any
> kind of modification. All Codehaus projects should deploy to the Codehaus
> Nexus instance.
>
> Regarding Nexus refusing to download due to bad checksum, you can configure
> this behavior in Nexus. I guess you could also ask for the checksum at
> central to be fixed ([1]).
>
> /Anders
>
> [1] https://issues.sonatype.org/browse/MVNCENTRAL
>
> On Thu, Jul 21, 2011 at 11:09, Julien HENRY <he...@yahoo.fr> wrote:
>
> > Hi,
> >
> > I have a problem using
> > org.codehaus.sonar-plugins.pdf-report:maven-pdfreport-plugin:1.2. Nexus
> > refuses to download the pom because md5 checksum doesn't match. I did
> some
> > tests, and here are my results:
> >
> > Central [1] :
> > - md5sum computed on downloaded pom =
> cd3e130dd8aee58484e1ab6d1817f0e0
> > - in .md5 file = 4b720e4669f09b336e08abe34b2bf546
> >
> > Codehaus [2] :
> > - md5sum computed ondownloaded pom = c9181c76ae57cdd343a8f65a95f94c58
> > - in .md5 file = 4a932f26a7904e187b53d92c7ccdaca5
> >
> > According to modification date I suspect the codehaus file was re
> uploaded
> > after the synchro was done on central. Does it mean codehaus allow
> redeploy
> > of released artifacts? Can you confirm the md5 in .md5 files are wrong
> (it
> > could be a bad joke of my corporate proxy) and if this is the case can
> > someone fix it on central.
> >
> > The diff between the poms from central and codehaus show only a
> difference
> > on the spanish "í" vs "i":
> >
> > > diff maven-pdfreport-plugin-1.2.pom
> > maven-pdfreport-plugin-1.2-codehaus.pom
> > 5c5
> > < * Copyright (C) 2010 klicap - ingeniería del puzle
> > ---
> > > * Copyright (C) 2010 klicap - ingenieria del puzle
> > 123c123
> > < <Developed-by>klicap - ingeniería del
> puzle</Developed-by>
> > ---
> > > <Developed-by>klicap - ingenieria del
> puzle</Developed-by>
> >
> >
> > I will try to download the JAR and check if they are the same.
> >
> > Regards,
> >
> >
> > [1]
> >
> http://repo1.maven.org/maven2/org/codehaus/sonar-plugins/pdf-report/maven-pdfreport-plugin/1.2/
> > [2]
> >
> http://repository.codehaus.org/org/codehaus/sonar-plugins/pdf-report/maven-pdfreport-plugin/1.2/
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> > For additional commands, e-mail: users-help@maven.apache.org
> >
> >
>
Re: Synchro issue between codehaus and central?
Posted by Anders Hammar <an...@hammar.net>.
http://repository.codehaus.org/ is an old repo at Codehaus that is not
controlled by Nexus. Thus, I believe it is possible to redeploy or do any
kind of modification. All Codehaus projects should deploy to the Codehaus
Nexus instance.
Regarding Nexus refusing to download due to bad checksum, you can configure
this behavior in Nexus. I guess you could also ask for the checksum at
central to be fixed ([1]).
/Anders
[1] https://issues.sonatype.org/browse/MVNCENTRAL
On Thu, Jul 21, 2011 at 11:09, Julien HENRY <he...@yahoo.fr> wrote:
> Hi,
>
> I have a problem using
> org.codehaus.sonar-plugins.pdf-report:maven-pdfreport-plugin:1.2. Nexus
> refuses to download the pom because md5 checksum doesn't match. I did some
> tests, and here are my results:
>
> Central [1] :
> - md5sum computed on downloaded pom = cd3e130dd8aee58484e1ab6d1817f0e0
> - in .md5 file = 4b720e4669f09b336e08abe34b2bf546
>
> Codehaus [2] :
> - md5sum computed ondownloaded pom = c9181c76ae57cdd343a8f65a95f94c58
> - in .md5 file = 4a932f26a7904e187b53d92c7ccdaca5
>
> According to modification date I suspect the codehaus file was re uploaded
> after the synchro was done on central. Does it mean codehaus allow redeploy
> of released artifacts? Can you confirm the md5 in .md5 files are wrong (it
> could be a bad joke of my corporate proxy) and if this is the case can
> someone fix it on central.
>
> The diff between the poms from central and codehaus show only a difference
> on the spanish "í" vs "i":
>
> > diff maven-pdfreport-plugin-1.2.pom
> maven-pdfreport-plugin-1.2-codehaus.pom
> 5c5
> < * Copyright (C) 2010 klicap - ingeniería del puzle
> ---
> > * Copyright (C) 2010 klicap - ingenieria del puzle
> 123c123
> < <Developed-by>klicap - ingeniería del puzle</Developed-by>
> ---
> > <Developed-by>klicap - ingenieria del puzle</Developed-by>
>
>
> I will try to download the JAR and check if they are the same.
>
> Regards,
>
>
> [1]
> http://repo1.maven.org/maven2/org/codehaus/sonar-plugins/pdf-report/maven-pdfreport-plugin/1.2/
> [2]
> http://repository.codehaus.org/org/codehaus/sonar-plugins/pdf-report/maven-pdfreport-plugin/1.2/
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
> For additional commands, e-mail: users-help@maven.apache.org
>
>