You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@maven.apache.org by "Benjamin Bentmann (JIRA)" <ji...@codehaus.org> on 2009/01/02 11:06:19 UTC

[jira] Commented: (MINSTALL-47) Add option to append the file name to the md5/sha1 checksums

    [ http://jira.codehaus.org/browse/MINSTALL-47?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=159672#action_159672 ] 

Benjamin Bentmann commented on MINSTALL-47:
-------------------------------------------

bq. Can all versions of Maven consume a checksum with the filename appended?
As per MNG-797, many versions can handle the format requested by Niall. Only SHA-1 checksums in OpenSSL format were not handled (MNG-1349).

What might need further investigation is how we deal with local vs. remote checksums. Niall's patches are straightforward but their effect would be limited to the local repo. The checksums deployed to remote repos are created by the Maven core, i.e. are independent from the checksums created by the Install Plugin. Unless we sync the formats between core and Install Plugin, the format of a checksum file depends on whether it was locally installed or downloaded remotely. Not sure how useful that is.

When we wanted to sync the formats, we would need a way to configure the format used by the Maven core. Not sure how to do that without expanding the POM structure, i.e. have some new elements within {{<distributiionManagement>}}.

To avoid the configuration issue and have equal local and remote checksums, I suggest we start off by hard-coding the format suggested by Niall in his first patch, both for the Install Plugin and the Maven core:
{noformat}
<checksum><space>*<filename><newline>
{noformat}

> Add option to append the file name to the md5/sha1 checksums
> ------------------------------------------------------------
>
>                 Key: MINSTALL-47
>                 URL: http://jira.codehaus.org/browse/MINSTALL-47
>             Project: Maven 2.x Install Plugin
>          Issue Type: Improvement
>    Affects Versions: 2.2
>            Reporter: Niall Pemberton
>            Priority: Minor
>         Attachments: maven-install-checksum-append-filename-v1.patch, maven-install-checksum-patterns-v1.patch
>
>
> Some tools which check checksums expect the sum to be followed by <space>*filename
> http://www.mail-archive.com/commons-dev@jakarta.apache.org/msg67770.html
> It would be good to have a configuration option so that the install plugin can do this

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira