[jira] [Comment Edited] (INFRA-8959) dist mirrors undesirably include hashes

["Christopher Tubbs (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/INFRA-8959?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14263368#comment-14263368 ] 

Christopher Tubbs edited comment on INFRA-8959 at 1/3/15 1:32 AM:
------------------------------------------------------------------

I don't know how rare it is. I find myself doing it pretty often. I've also seen it used in cases where people want to GPG-sign the hashes file [like this|https://getfedora.org/en/static/checksums/Fedora-Workstation-21-x86_64-CHECKSUM] (though, that example only has one), rather than provide detached signatures for each file.

In any case, thanks for the response. I've reverted the rename.


was (Author: ctubbsii):
I don't know how rare it is. I find myself doing it pretty often. I've also seen it used in cases where people want to GPG-sign the hashes file [like this|https://getfedora.org/en/static/checksums/Fedora-Workstation-21-x86_64-CHECKSUM], rather than provide detached signatures for each file.

In any case, thanks for the response. I've reverted the rename.

> dist mirrors undesirably include hashes
> ---------------------------------------
>
>                 Key: INFRA-8959
>                 URL: https://issues.apache.org/jira/browse/INFRA-8959
>             Project: Infrastructure
>          Issue Type: Wish
>          Components: Dists, Mirrors, SvnPubSub
>            Reporter: Christopher Tubbs
>
> According to http://www.apache.org/dev/release-publishing.html,
> "It is vital that hash, signature and KEYS files are only downloaded from ASF hosts. So the following files are excluded from synchronisation:
> .md5 .MD5 .sha1 .sha .sha256 .sha512 .asc .sig KEYS KEYS.txt
> Do not use any other file names for such files."
> The Accumulo project inadvertently used a different naming convention (SHA1SUM and MD5SUM). See ACCUMULO-3457.
> Since these filenames are not unusual, it is requested that the following case-insensitive pattern also be excluded:
> (sha\d*|md5?)sums?([.]txt)?



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)