Re: [Nexus] Does Nexus check MD5 and SHA1 files?
sebb <[email protected]>
| Newsgroups | gmane.comp.jakarta.repository |
|---|---|
| Message-ID | <[email protected]> |
On 23 August 2010 15:51, Juven Xu <[email protected]> wrote: > the checksum rule is enabled If the rule is enabled, how come the user (not me) was able to upload faulty checksums? > so make sure you are not using Maven 2.2.0, it > will generate incorrect checksums when it deploys artifact to Nexus. > > On Mon, Aug 23, 2010 at 5:36 PM, Juven Xu <[email protected]> wrote: >> >> currently only gpg validation rule is enabled >> >> Brian, i think you can enable all the other rules, like checksum, javadoc, >> sources, pom etc. >> >> On Mon, Aug 23, 2010 at 5:21 AM, sebb <[email protected]> wrote: >>> >>> There seem to be some problems with the hash files in the recent >>> HttpComponents Nexus deployment: >>> >>> >>> https://repository.apache.org/content/repositories/orgapachehttpcomponents-132/org/apache/httpcomponents/httpcore-osgi/4.1-beta2/ >>> >>> It looks like all the hashes are wrong. >>> >>> AFAIK, Nexus checks the sig (.ASC) files, because I remember getting >>> an error when I forgot to upload my new key. >>> >>> If Nexus does not check hashes (as seems to be the case), are there >>> any plans to add this feature? >> >> >> >> -- >> - juven > > > > -- > - juven >