Does an incubator project release requires sha1 checksum too? From: http://www.apache.org/dev/release-signing.html:
"An SHA checksum *should* also be created and *must* be suffixed .sha" Looks like it should but not required? - Henry On Mon, Jun 10, 2013 at 5:05 PM, Benjamin Mahler <benjamin.mah...@gmail.com>wrote: > Please vote on releasing the following candidate as Apache Mesos > (incubating) version 0.12.0. This will be the fourth incubator release for > Mesos in Apache. > > The candidate for Mesos 0.12.0-incubating release is available at: > > http://people.apache.org/~bmahler/mesos-0.12.0-incubating-RC1/mesos-0.12.0-incubating.tar.gz > > The tag to be voted on is 0.12.0-rc1: > > https://git-wip-us.apache.org/repos/asf?p=incubator-mesos.git;a=tag;h=57d7b9719dce662881b162eba10b5765a807d53c > > The MD5 checksum of the tarball can be found at: > > http://people.apache.org/~bmahler/mesos-0.12.0-incubating-RC1/mesos-0.12.0-incubating.tar.gz.md5 > > The signature of the tarball can be found at: > > http://people.apache.org/~bmahler/mesos-0.12.0-incubating-RC1/mesos-0.12.0-incubating.tar.gz.asc > > PGP key used to sign the release: > http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xD0BEBB95D141A5B6 > > Please vote on releasing this package as Apache Mesos 0.12.0-incubating! > > The vote is open until Thursday, June 13th at 00:00 UTC and passes if > a majority > of at least 3 +1 IPMC votes are cast. > > [ ] +1 Release this package as Apache Mesos 0.12.0-incubating > [ ] -1 Do not release this package because ... > > To learn more about Apache Mesos, please see > http://incubator.apache.org/mesos. >