Stefan wrote on Thu, 06 Jul 2017 00:14 +0200:
> Summary
> -------
> +0.5 to release (+1 once subversion-1.8.18.tar.gz.sha512 has been
> corrected - see below)
>
> Verified
> --------
> subversion-1.8.18.tar.gz:
> Signature verified.
> SHA-1: 22ab7f366fb1d373247c56696b2b754c5fd06368 (matches provided
> SHA-1-checksum)
> SHA-512:
> 172a07ae66a53b593a3ba20d2cb3e17a926ded5b0741b7549f540aad84d42b2aad08fdc5d475f65828bcfc1d3d5526238fb850c317bb5599576f3ba9c1295245
> *NOTE: *subversion-1.8.18.tar.gz.sha512 is a GZIP archive containing a
> single file: "subversion-1.8.18.tar.gz.ahs512 which contains the SHA-512
> checksum matching the value above
The .gz.sha512 file is not compressed in the repository:
[[[
% () { for 1; wget -qO- $1 | file - } https://dist.apache.org/repos/dist/dev/subversion/subversion-1.8.18.{tar.gz,tar.bz2,zip}.sha512
/dev/stdin: ASCII text
/dev/stdin: ASCII text
/dev/stdin: ASCII text
]]]
How are you downloading it? Might your user agent be applying
Content-Transfer-Encoding that the server doesn't specify? Do you see the same
problem with the 1.8.18 .gz.sha1 file? Do you see the same problem with
<https://www.apache.org/dist/ant/binaries/apache-ant-1.10.1-bin.tar.gz.sha512>?
(I'm trying to see whether the problem occurs on www.a.o/dist/ as well)
Our main concern here should be to ensure that the sha512 link on the
download page will be usable by end users.
Cheers,
Daniel
P.S. I'm asking about ant-1.10.1 rather than subversion-1.9.6 because
ant uses the same EOL style as 1.8.18, whereas 1.9.6 doesn't.
Received on 2017-07-06 04:13:11 CEST