[MRESOLVER-265] Checksum of checksum #187
Conversation
There is a discrepancy when a checksum is attached (so not added by resolver itself), and resolver will checksum it if the algorithm is not configured (ie. default config used but SHA512 added). This makes it work as expected, as checksum recognition works now against ALL SUPPORTED and not configured ONLY checksums).
|
I am pretty sure some older Maven repository implementations (e.g. Nexus2) always require MD5/SHA1 (even for sha512 files). Not sure about the implications of this change with those repo managers. |
I am pretty sure this is not true for deploy (to some hosted repository), is it possible you talk about staging maybe? As in that case, Nexus2 (on repo.a.o but also OSS.s.o) enforce some things, and yes, I'd expect some strangeness here.... but given it's closed source, they should fix it IMHO 😄 |
|
These are the staging rule conflicts I am aware of: https://issues.apache.org/jira/browse/INFRA-14923 and https://issues.sonatype.org/browse/MVNCENTRAL-5276 |
|
Seems https://issues.sonatype.org/browse/NEXUS-21802 is fixed in Nx2 2.14.18, and ASF NX2 is 2.14.20 and oss.s.o is 2.15 so both should be fine. |
There is a discrepancy when a checksum is attached (so not added
by resolver itself), and resolver will checksum it if the algorithm
is not configured (ie. default config used but SHA512 added).
This makes it work as expected, as checksum recognition works
now against ALL SUPPORTED and not configured ONLY checksums).
https://issues.apache.org/jira/browse/MRESOLVER-265