On 7/6/2017 08:04, Stefan wrote:
> On 7/6/2017 04:13, Daniel Shahaf wrote:
>> Stefan wrote on Thu, 06 Jul 2017 00:14 +0200:
>>> Summary
>>> -------
>>> +0.5 to release (+1 once subversion-1.8.18.tar.gz.sha512 has been
>>> corrected - see below)
>>>
>>> Verified
>>> --------
>>> subversion-1.8.18.tar.gz:
>>> Signature verified.
>>> SHA-1: 22ab7f366fb1d373247c56696b2b754c5fd06368 (matches provided
>>> SHA-1-checksum)
>>> SHA-512:
>>> 172a07ae66a53b593a3ba20d2cb3e17a926ded5b0741b7549f540aad84d42b2aad08fdc5d475f65828bcfc1d3d5526238fb850c317bb5599576f3ba9c1295245
>>> *NOTE: *subversion-1.8.18.tar.gz.sha512 is a GZIP archive containing a
>>> single file: "subversion-1.8.18.tar.gz.ahs512 which contains the SHA-512
>>> checksum matching the value above
>> The .gz.sha512 file is not compressed in the repository:
>>
>> [[[
>> % () { for 1; wget -qO- $1 | file - } https://dist.apache.org/repos/dist/dev/subversion/subversion-1.8.18.{tar.gz,tar.bz2,zip}.sha512
>> /dev/stdin: ASCII text
>> /dev/stdin: ASCII text
>> /dev/stdin: ASCII text
>> ]]]
> That's interesting... Just confirmed that indeed in the c/o of
> https://dist.apache.org/repos/dist/dev/subversion the file is not
> compressed and looks fine here too.
>> How are you downloading it?
> Downloaded from: https://dist.apache.org/repos/dist/dev/subversion/
> using FF 54.0.1 (64-bit) on Windows 10. (direct link:
> https://dist.apache.org/repos/dist/dev/subversion/subversion-1.8.18.tar.gz.sha512
> ).
>> Might your user agent be applying
>> Content-Transfer-Encoding that the server doesn't specify? Do you see the same
>> problem with the 1.8.18 .gz.sha1 file?
> Unlikely it's on my client side, I'd say.
> https://dist.apache.org/repos/dist/dev/subversion/subversion-1.8.18.tar.gz.sha1
> looks fine (not compressed).
>> Do you see the same problem with
>> <https://www.apache.org/dist/ant/binaries/apache-ant-1.10.1-bin.tar.gz.sha512>?
> Nope, that file is uncompressed when I download it via FF.
>
>> (I'm trying to see whether the problem occurs on www.a.o/dist/ as well)
>>
>> Our main concern here should be to ensure that the sha512 link on the
>> download page will be usable by end users.
> +1
>> Cheers,
>>
>> Daniel
>>
>> P.S. I'm asking about ant-1.10.1 rather than subversion-1.9.6 because
>> ant uses the same EOL style as 1.8.18, whereas 1.9.6 doesn't.
>>
As per Daniel's suggestion on IRC tried:
https://dist.apache.org/repos/dist/release/ant/binaries/apache-ant-1.10.1-bin.tar.gz.sha512
- that one looks good here. Hence I agree with his conclusion that it's
some dist.a.o artifact which won't effect the sha512-files for the release.
+1 for release from me then.
Regards,
Stefan
Received on 2017-07-06 08:14:49 CEST