You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@openoffice.apache.org by bu...@apache.org on 2019/04/22 18:53:13 UTC
[Issue 128096] New: Must use https://www.apache.org/dist/ for hashes
and sigs
https://bz.apache.org/ooo/show_bug.cgi?id=128096
Issue ID: 128096
Issue Type: DEFECT
Summary: Must use https://www.apache.org/dist/ for hashes and
sigs
Product: Infrastructure
Version: current
Hardware: All
OS: All
Status: CONFIRMED
Severity: Normal
Priority: P5 (lowest)
Component: Website general issues
Assignee: issues@openoffice.apache.org
Reporter: sebb@apache.org
Target Milestone: ---
The download page currently directs to the archive server for the hashes and
sigs.
The links must use https://www.apache.org/dist/openoffice/, not the archive
server.
--
You are receiving this mail because:
You are the assignee for the issue.
[Issue 128096] Hashes and sigs for the current release need to come
from ASF Dist server
Posted by bu...@apache.org.
https://bz.apache.org/ooo/show_bug.cgi?id=128096
Marcus <ma...@apache.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Resolution|--- |FIXED_WITHOUT_CODE
Status|CONFIRMED |RESOLVED
--- Comment #12 from Marcus <ma...@apache.org> ---
Thanks for testing and verification.
PS:
Status "Fixed_without_code" because no change in the OpenOffice code but only
in the websites.
--
You are receiving this mail because:
You are on the CC list for the issue.
[Issue 128096] Must use https://www.apache.org/dist/ for hashes and
sigs
Posted by bu...@apache.org.
https://bz.apache.org/ooo/show_bug.cgi?id=128096
--- Comment #8 from sebb@apache.org ---
I think you have misunderstood what Infra said.
The archive server - archive.apache.org - is ONLY intended for downloads of
older, archived releases.
Current source releases must be downloaded from the ASF mirror system (*) and
the associated KEYS, sigs and hashes must be downloaded from
https://www.apache.org/dist/openoffice/...
Since OO is so large, there are other download sites for the binaries.
However the KEYS, sigs and hashes which related to the binaries must come from
https://www.apache.org/dist/openoffice/...
--
You are receiving this mail because:
You are on the CC list for the issue.
[Issue 128096] Must use https://www.apache.org/dist/ for hashes and
sigs
Posted by bu...@apache.org.
https://bz.apache.org/ooo/show_bug.cgi?id=128096
Marcus <ma...@apache.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |issues@openoffice.apache.or
| |g
--- Comment #5 from Marcus <ma...@apache.org> ---
@sebb:
I've meant it like I've written it. So, what exactly is not understandable?
--
You are receiving this mail because:
You are on the CC list for the issue.
[Issue 128096] Hashes and sigs for the current release need to come
from ASF Dist server
Posted by bu...@apache.org.
https://bz.apache.org/ooo/show_bug.cgi?id=128096
--- Comment #11 from Matthias Seidel <ms...@apache.org> ---
Thanks, Marcus!
For me it looks good and we should submit it...
--
You are receiving this mail because:
You are on the CC list for the issue.
[Issue 128096] Must use https://www.apache.org/dist/ for hashes and
sigs
Posted by bu...@apache.org.
https://bz.apache.org/ooo/show_bug.cgi?id=128096
--- Comment #2 from Matthias Seidel <ms...@apache.org> ---
I see now the problem is on https://www.openoffice.org/download
Will have a look into it!
--
You are receiving this mail because:
You are the assignee for the issue.
[Issue 128096] Hashes and sigs for the current release need to come
from ASF Dist server
Posted by bu...@apache.org.
https://bz.apache.org/ooo/show_bug.cgi?id=128096
Marcus <ma...@apache.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|RESOLVED |CLOSED
--
You are receiving this mail because:
You are on the CC list for the issue.
[Issue 128096] Must use https://www.apache.org/dist/ for hashes and
sigs
Posted by bu...@apache.org.
https://bz.apache.org/ooo/show_bug.cgi?id=128096
--- Comment #6 from sebb@apache.org ---
"... it was agreed with Infra ..." -- what is 'it' that was agreed with Infra?
==
Note that I am saying that hashes and sigs for the current release(s) must be
served from www.apache.org, not from archive.apache.org.
[For releases that are only on the archives, of course the hashes and sigs
should be served from there as well, but that is not what this issues is
about.]
--
You are receiving this mail because:
You are on the CC list for the issue.
[Issue 128096] Must use https://www.apache.org/dist/ for hashes and
sigs
Posted by bu...@apache.org.
https://bz.apache.org/ooo/show_bug.cgi?id=128096
Matthias Seidel <ms...@apache.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |mseidel@apache.org
--- Comment #1 from Matthias Seidel <ms...@apache.org> ---
You surely are referring to:
https://openoffice.apache.org/downloads.html
(We also have a download page at https://www.openoffice.org/)
The hashes for the current release are on /dist.
Only the hashes for the archived versions point to /archive.
How are hashes for an archived version supposed to be on /dist?
--
You are receiving this mail because:
You are the assignee for the issue.
[Issue 128096] Must use https://www.apache.org/dist/ for hashes and
sigs
Posted by bu...@apache.org.
https://bz.apache.org/ooo/show_bug.cgi?id=128096
--- Comment #9 from Marcus <ma...@apache.org> ---
(In reply to sebb from comment #8)
> I think you have misunderstood what Infra said.
Thinking and believing doesn't matter here. When you haven't participated in
our discussions, then you don't know what happened. ;-)
> The archive server - archive.apache.org - is ONLY intended for downloads of
> older, archived releases.
>
> [...]
Nice but also notzhing new.
--
You are receiving this mail because:
You are on the CC list for the issue.
[Issue 128096] Must use https://www.apache.org/dist/ for hashes and
sigs
Posted by bu...@apache.org.
https://bz.apache.org/ooo/show_bug.cgi?id=128096
--- Comment #7 from Marcus <ma...@apache.org> ---
(In reply to sebb from comment #6)
> "... it was agreed with Infra ..." -- what is 'it' that was agreed with
> Infra?
it = the situation like it is today: everything comes from the archive server -
which is btw also a ASF system. So, the main idea behind "host the binaries
whereever you want but the source + hash must come from ASF servers" is
fulfilled.
--
You are receiving this mail because:
You are on the CC list for the issue.
[Issue 128096] Hashes and sigs for the current release need to come
from ASF Dist server
Posted by bu...@apache.org.
https://bz.apache.org/ooo/show_bug.cgi?id=128096
Marcus <ma...@apache.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Summary|Must use |Hashes and sigs for the
|https://www.apache.org/dist |current release need to
|/ for hashes and sigs |come from ASF Dist server
--- Comment #10 from Marcus <ma...@apache.org> ---
I think I've changed it sucessfully, so please test on the staging server and
report back before I publish the change:
http://ooo-site.staging.apache.org/download/index.html
Thanks
--
You are receiving this mail because:
You are on the CC list for the issue.
[Issue 128096] Must use https://www.apache.org/dist/ for hashes and
sigs
Posted by bu...@apache.org.
https://bz.apache.org/ooo/show_bug.cgi?id=128096
Marcus <ma...@apache.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Assignee|issues@openoffice.apache.or |marcus@apache.org
|g |
--- Comment #3 from Marcus <ma...@apache.org> ---
Even when it was agreed with Infra years ago that we can go this way, I'll have
a look how it can be changed now.
--
You are receiving this mail because:
You are the assignee for the issue.