On 7/6/2017 04:13, Daniel Shahaf wrote:
> Stefan wrote on Thu, 06 Jul 2017 00:14 +0200:
>> Summary
>> -------
>> +0.5 to release (+1 once subversion-1.8.18.tar.gz.sha512 has been
>> corrected - see below)
>>
>> Verified
>> --------
>> subversion-1.8.18.tar.gz:
>> Signature verified.
>> SHA-1: 22ab7f366fb1d373247c56696b2b754c5fd06368 (matches provided
>> SHA-1-checksum)
>> SHA-512:
>> 172a07ae66a53b593a3ba20d2cb3e17a926ded5b0741b7549f540aad84d42b2aad08fdc5d475f65828bcfc1d3d5526238fb850c317bb5599576f3ba9c1295245
>> *NOTE: *subversion-1.8.18.tar.gz.sha512 is a GZIP archive containing a
>> single file: "subversion-1.8.18.tar.gz.ahs512 which contains the SHA-512
>> checksum matching the value above
> The .gz.sha512 file is not compressed in the repository:
>
> [[[
> % () { for 1; wget -qO- $1 | file - } https://dist.apache.org/repos/dist/dev/subversion/subversion-1.8.18.{tar.gz,tar.bz2,zip}.sha512
> /dev/stdin: ASCII text
> /dev/stdin: ASCII text
> /dev/stdin: ASCII text
> ]]]
That's interesting... Just confirmed that indeed in the c/o of
https://dist.apache.org/repos/dist/dev/subversion the file is not
compressed and looks fine here too.
> How are you downloading it?
Downloaded from: https://dist.apache.org/repos/dist/dev/subversion/
using FF 54.0.1 (64-bit) on Windows 10. (direct link:
https://dist.apache.org/repos/dist/dev/subversion/subversion-1.8.18.tar.gz.sha512
).
> Might your user agent be applying
> Content-Transfer-Encoding that the server doesn't specify? Do you see the same
> problem with the 1.8.18 .gz.sha1 file?
Unlikely it's on my client side, I'd say.
https://dist.apache.org/repos/dist/dev/subversion/subversion-1.8.18.tar.gz.sha1
looks fine (not compressed).
> Do you see the same problem with
> <https://www.apache.org/dist/ant/binaries/apache-ant-1.10.1-bin.tar.gz.sha512>?
Nope, that file is uncompressed when I download it via FF.
> (I'm trying to see whether the problem occurs on www.a.o/dist/ as well)
>
> Our main concern here should be to ensure that the sha512 link on the
> download page will be usable by end users.
+1
>
> Cheers,
>
> Daniel
>
> P.S. I'm asking about ant-1.10.1 rather than subversion-1.9.6 because
> ant uses the same EOL style as 1.8.18, whereas 1.9.6 doesn't.
Regards,
Stefan
Received on 2017-07-06 08:05:05 CEST