I think we're fine, we do provide the .asc PGP armored signatures.
I'll remove the .md5 and .sha1 files from the repository.
Le lun. 20 janv. 2020 à 13:47, Emmanuel Lécharny <elecharny@gmail.com> a
écrit :
> Hi guys,
>
>
> I'm sorry, but new release *MUST* be signed using something stronger
> than MD5 or SHA1 :
>
>
> https://www.apache.org/dev/release-distribution.html#sigs-and-sums :
>
>
> "SHOULD NOT supply a MD5 or SHA-1 checksum file (because these are
> deprecated)"
>
>
>
>
> On 18/01/2020 09:02, Guillaume Nodet wrote:
> > I've staged a release candidate:
> > * Repo:
> > https://repository.apache.org/content/repositories/orgapachemina-1047
> > * Distributions:
> >
> https://repository.apache.org/content/repositories/orgapachemina-1047/org/apache/sshd/apache-sshd/2.4.0/
> > * Git Tag:
> https://github.com/apache/mina-sshd/releases/tag/sshd-2.4.0
> >
> > Please review and vote !
> >
> > Cheers,
> > Guillaume Nodet
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org
> For additional commands, e-mail: dev-help@mina.apache.org
>
>
--
------------------------
Guillaume Nodet
|