You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@lucene.apache.org by "Robert Muir (JIRA)" <ji...@apache.org> on 2013/08/21 23:57:52 UTC

[jira] [Commented] (LUCENE-5185) licenses/*.jar.sha1 don't belong in Lucene and Solr binary distributions

    [ https://issues.apache.org/jira/browse/LUCENE-5185?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13746892#comment-13746892 ] 

Robert Muir commented on LUCENE-5185:
-------------------------------------

{quote}
Somewhere between then and now, *.jar.sha1 files snuck back into the Lucene and Solr binary releases, under the licenses/ directory. 
{quote}

There was no sneakiness about it, it was totally intentional: LUCENE-4267

{quote}
They should not be there.
{quote}

Thats your personal opinion: I disagree (please see the issue for discussion).
                
> licenses/*.jar.sha1 don't belong in Lucene and Solr binary distributions
> ------------------------------------------------------------------------
>
>                 Key: LUCENE-5185
>                 URL: https://issues.apache.org/jira/browse/LUCENE-5185
>             Project: Lucene - Core
>          Issue Type: Improvement
>          Components: general/build
>            Reporter: Steve Rowe
>            Assignee: Steve Rowe
>            Priority: Minor
>             Fix For: 5.0, 4.5
>
>
> On LUCENE-3945, where external dependency checksum verification was put in place, [~hossman_lucene@fucit.org] wrote:
> bq. So i propose that we include checksum files in svn and in our source releases that can be used by users to verify that the jars they get from ivy match the jars we tested against.
> That is, checksum files in *binary* distributions was not part of the proposal.
> And [in his comment associated with the final patch|https://issues.apache.org/jira/browse/LUCENE-3945?focusedCommentId=13246476&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-13246476]:
> bq. 2) fixes the binary releases to exlcude the sha1 files
> Somewhere between then and now, {{\*.jar.sha1}} files snuck back into the Lucene and Solr binary releases, under the {{licenses/}} directory.  They should not be there.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org