You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@maven.apache.org by David Milet <da...@gmail.com> on 2021/04/30 00:35:31 UTC
Maven 3.8.1 + maven-deploy-plugin 3.0.0-M1 and still no SHA256/SHA512
Hello,
Maven 3.8.1 picked up new maven-resolver which supports the generation (and
I suppose, verification) of SHA256 and SHA512 digests. (
https://issues.apache.org/jira/browse/MRESOLVER-115)
However it seems that maven-deploy-plugin 3.0.0-M1 still uses
maven-artifact-transfer 0.10.0, which generates MD5 and SHA1 digests
(removed in 0.13.1 it seems
https://issues.apache.org/jira/browse/MSHARED-922).
When will maven-deploy-plugin be updated to generate the new digests ?
Re: Maven 3.8.1 + maven-deploy-plugin 3.0.0-M1 and still no
SHA256/SHA512
Posted by Michael Osipov <mi...@apache.org>.
Am 2021-04-30 um 07:29 schrieb David Milet:
> I figured it out...
>
> With Maven 3.8.1 and maven-deploy-plugin 3.0.0-M1, need to pass
> -Daether.checksums.algorithms="SHA256,SHA512"
> to the maven options
Please note that this won't pass Maven Central upload validation.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@maven.apache.org
For additional commands, e-mail: users-help@maven.apache.org
Re: Maven 3.8.1 + maven-deploy-plugin 3.0.0-M1 and still no SHA256/SHA512
Posted by David Milet <da...@gmail.com>.
I figured it out...
With Maven 3.8.1 and maven-deploy-plugin 3.0.0-M1, need to pass
-Daether.checksums.algorithms="SHA256,SHA512"
to the maven options
On Thu, Apr 29, 2021 at 8:35 PM David Milet <da...@gmail.com> wrote:
> Hello,
>
> Maven 3.8.1 picked up new maven-resolver which supports the generation
> (and I suppose, verification) of SHA256 and SHA512 digests. (
> https://issues.apache.org/jira/browse/MRESOLVER-115)
>
> However it seems that maven-deploy-plugin 3.0.0-M1 still uses
> maven-artifact-transfer 0.10.0, which generates MD5 and SHA1 digests
> (removed in 0.13.1 it seems
> https://issues.apache.org/jira/browse/MSHARED-922).
>
> When will maven-deploy-plugin be updated to generate the new digests ?
>
>