Re: Formats of SHA/MD5 checksums

2012-12-02 Thread Jake Farrell
That page is part of the Apache CMS and ASF members can edit that page by using the following http://www.apache.org/dev/cms.html#usage. Non ASF members can create a ticket within jira under the infra project and attach a patch for the changes they would like to make. The repo and file you are

Re: Formats of SHA/MD5 checksums

2012-12-02 Thread Mark Thomas
Roman Shaposhnik wrote: >+infra > >Ping! I would really like this annoyance to be resolved one way or the >other. >Could somebody more experienced with Apache web properties answer >the question? > > >> Question: how do we go about dis

Re: Formats of SHA/MD5 checksums

2012-12-02 Thread Henk P. Penning
On Fri, 30 Nov 2012, Roman Shaposhnik wrote: Date: Fri, 30 Nov 2012 03:05:15 +0100 From: Roman Shaposhnik To: general@incubator.apache.org, infrastruct...@apache.org Subject: Re: Formats of SHA/MD5 checksums Sender: shaposh...@gmail.com On Sun, Nov 25, 2012 at 9:29 PM, Roman Shaposhnik

Re: Formats of SHA/MD5 checksums

2012-11-30 Thread Roman Shaposhnik
On Thu, Nov 29, 2012 at 11:49 PM, Mark Thomas wrote: > Releases and new committers are pretty much the only time I'd expect to see > votes in an Apache community. Understood. My question was specifically about the process used by ASF to manage its "top level" web pages. Now I know. Thanks, Roma

Re: Formats of SHA/MD5 checksums

2012-11-30 Thread Roman Shaposhnik
On Fri, Nov 30, 2012 at 1:08 AM, Henk P. Penning wrote: > I am +1 on suggesting (on that page) a 'normal' form for > the content of a .md5 file. I'll take a crack at it now that I know where the source is ;-) > I am definitedly -1 on removing the gpg line above, or > suggesting that only

Re: Formats of SHA/MD5 checksums

2012-11-30 Thread Daniel Shahaf
Daniel Shahaf wrote on Sat, Dec 01, 2012 at 07:25:54 +0200: > Jake Farrell wrote on Thu, Nov 29, 2012 at 22:02:16 -0500: > > That page is part of the Apache CMS and ASF members can edit that page > > by using the following http://www.apache.org/dev/cms.html#usage. Non ASF > > members can create

Re: Formats of SHA/MD5 checksums

2012-11-30 Thread Daniel Shahaf
Jake Farrell wrote on Thu, Nov 29, 2012 at 22:02:16 -0500: > That page is part of the Apache CMS and ASF members can edit that page > by using the following http://www.apache.org/dev/cms.html#usage. Non ASF > members can create a ticket within jira under the infra project and > attach a patch

Re: Formats of SHA/MD5 checksums

2012-11-30 Thread Daniel Shahaf
Henk P. Penning wrote on Fri, Nov 30, 2012 at 10:08:33 +0100: > The reason given "I ended up writing a Perl script" doesn't > make sense ; .md5 files come in many forms but the algorithm > to verify is the same for all of them (there are no 'variations.') : > > verify (checksum md5, .md5-

Re: Formats of SHA/MD5 checksums

2012-11-29 Thread Daniel Shahaf
Roman Shaposhnik wrote on Thu, Nov 29, 2012 at 18:05:15 -0800: > +infra > > Ping! I would really like this annoyance to be resolved one way or the other. > Could somebody more experienced with Apache web properties answer > the question? > > ===

Re: Formats of SHA/MD5 checksums

2012-11-29 Thread Alexander Broekhuis
Hi, > I think that would be a fine choice. I'm fine with releasing it as is for > now > +1 (binding). > Thanks! Could you post your vote to the formal release thread as well? > > That said -- I'd like to see the next release take into account the > feedback > that has been provided to the proje

Re: Formats of SHA/MD5 checksums

2012-11-29 Thread Marcel Offermans
On Nov 30, 2012, at 3:03 AM, Roman Shaposhnik wrote: > On Thu, Nov 29, 2012 at 12:12 AM, Alexander Broekhuis > wrote: >> I am fine with a change of the format. But at the moment we (Celix) still >> have a pending release. Seeing that many other project use different >> formats, I personally don'

Re: Formats of SHA/MD5 checksums

2012-11-29 Thread Roman Shaposhnik
+infra Ping! I would really like this annoyance to be resolved one way or the other. Could somebody more experienced with Apache web properties answer the question? > Question: how do we go about discouraging it then? Do we need a vote

Re: Formats of SHA/MD5 checksums

2012-11-29 Thread Roman Shaposhnik
On Thu, Nov 29, 2012 at 12:12 AM, Alexander Broekhuis wrote: > I am fine with a change of the format. But at the moment we (Celix) still > have a pending release. Seeing that many other project use different > formats, I personally don't see this as a show stopper for our current > release.. > > C

Re: Formats of SHA/MD5 checksums

2012-11-29 Thread Alexander Broekhuis
Hi all, > > Question: how do we go about discouraging it then? Do we need a vote > to modify the content of: >http://www.apache.org/dev/release-signing#md5 > > I am fine with a change of the format. But at the moment we (Celix) still have a pending release. Seeing that many other project use d

Re: Formats of SHA/MD5 checksums

2012-11-25 Thread Roman Shaposhnik
On Tue, Nov 20, 2012 at 3:50 PM, sebb wrote: >> Personally, I find it difficult to verify the GPG generated checksums. > > Ditto. It's particularly awkward when the hash is wrapped over several lines. > > I ended up writing a Perl script to handle all the variations. > >> If I'm not alone perhaps

Re: Formats of SHA/MD5 checksums

2012-11-20 Thread sebb
On 20 November 2012 23:22, Roman Shaposhnik wrote: > On Tue, Nov 20, 2012 at 1:51 PM, sebb wrote: >> (Though installing it just for hash creation may be overkill). >> >> Maven generates hashes which are easy to check. >> It's easy to use Ant to generate hashes in a suitable format. > > And this i

Re: Formats of SHA/MD5 checksums

2012-11-20 Thread Roman Shaposhnik
On Tue, Nov 20, 2012 at 1:51 PM, sebb wrote: > (Though installing it just for hash creation may be overkill). > > Maven generates hashes which are easy to check. > It's easy to use Ant to generate hashes in a suitable format. And this is the crux of the question -- what IS suitable format? Perso

Re: Formats of SHA/MD5 checksums

2012-11-20 Thread sebb
On 20 November 2012 21:20, Marvin Humphrey wrote: > On Tue, Nov 20, 2012 at 12:22 PM, Roman Shaposhnik wrote: >> Hi! >> >> while reviewing Celix RC I came across a peculiar format >> for the SHA/MD5 checksums which I've never seen before: >> >> https://dist.apache.org/repos/dist/dev/incubato

Re: Formats of SHA/MD5 checksums

2012-11-20 Thread Marvin Humphrey
On Tue, Nov 20, 2012 at 12:22 PM, Roman Shaposhnik wrote: > Hi! > > while reviewing Celix RC I came across a peculiar format > for the SHA/MD5 checksums which I've never seen before: > > https://dist.apache.org/repos/dist/dev/incubator/celix/celix-0.0.1-incubating/ > > Turns out, this is the

Re: Formats of SHA/MD5 checksums

2012-11-20 Thread Roman Shaposhnik
On Tue, Nov 20, 2012 at 12:27 PM, Ted Dunning wrote: > What does gpg --verify do? > > http://www.gnupg.org/download/integrity_check.en.html It verifies the GPG sig (as it should). I wasn't able to find (well, by spending 2 minutes searching through the man page on my Linux) an easy way to ask it

Re: Formats of SHA/MD5 checksums

2012-11-20 Thread Ted Dunning
What does gpg --verify do? http://www.gnupg.org/download/integrity_check.en.html On Tue, Nov 20, 2012 at 12:22 PM, Roman Shaposhnik wrote: > Turns out, this is the output of gpg and it seems that > there's no way to ask gpg to verify it (unlike -c for md5sum lets > say). Worse yet, because of t

Re: Formats of SHA/MD5 checksums

2012-11-20 Thread Alexander Broekhuis
Hi all, > while reviewing Celix RC I came across a peculiar format > for the SHA/MD5 checksums which I've never seen before: > > https://dist.apache.org/repos/dist/dev/incubator/celix/celix-0.0.1-incubating/ There are several other projects who do use the same tools. Cloudstack even list on the

Formats of SHA/MD5 checksums

2012-11-20 Thread Roman Shaposhnik
Hi! while reviewing Celix RC I came across a peculiar format for the SHA/MD5 checksums which I've never seen before: https://dist.apache.org/repos/dist/dev/incubator/celix/celix-0.0.1-incubating/ Turns out, this is the output of gpg and it seems that there's no way to ask gpg to verify it (u