You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@hbase.apache.org by "Sean Busbey (JIRA)" <ji...@apache.org> on 2016/04/29 23:40:13 UTC

[jira] [Resolved] (HBASE-9690) HBase Mirrors are missing md5 and sha1 checksums for tarballs

     [ https://issues.apache.org/jira/browse/HBASE-9690?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Sean Busbey resolved HBASE-9690.
--------------------------------
    Resolution: Information Provided

Closing this as "information provided" because the earlier comment that checksums / signatures should be downloaded directly from www.apache.org/dist/hbase is correct.

> HBase Mirrors are missing md5 and sha1 checksums for tarballs
> -------------------------------------------------------------
>
>                 Key: HBASE-9690
>                 URL: https://issues.apache.org/jira/browse/HBASE-9690
>             Project: HBase
>          Issue Type: Improvement
>    Affects Versions: 0.94.12
>            Reporter: André Kelpe
>
> Currently there is no way to verify the integrity of release tarballs. Please provide md5, sha1 and gpg signatures, so that users can be sure, that they have the correct tarball.
> Many open source projects provide the above and hbase would benefit from that as well.
> This looks like the right solution for the problem:
> http://nicoulaj.github.io/checksum-maven-plugin/examples/generating-project-artifacts-checksums.html



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)