[ http://jira.codehaus.org/browse/MEV-455?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_89641 ]
Wendy Smoak commented on MEV-455: --------------------------------- The pom for the latest release of maven-gpg-plugin has a bad checksum, which I noticed when Archiva refused to proxy it (MRM-212). http://repo1.maven.org/maven2/org/apache/maven/plugins/maven-gpg-plugin/1.0-alpha-3/ INFO | jvm 1 | 2007/03/10 11:04:14 | 2007-03-10 11:04:14,790 [SocketListener0-2] WARN ProxyRequestHandler - The checksum 'e4525958537d3b438ede7acb73bd10ba' did not match the remote value: D41D8CD98F00B204E9800998ECF8427E INFO | jvm 1 | 2007/03/10 11:04:14 | 2007-03-10 11:04:14,790 [SocketListener0-2] WARN ProxyRequestHandler - Skipping repository Central Repository: Checksum failures occurred while downloading org/apache/maven/plugins/maven-gpg-plugin/1.0-alpha-3/maven-gpg-plugin-1.0-alpha-3.pom > bad checksums on repo1.maven.org > -------------------------------- > > Key: MEV-455 > URL: http://jira.codehaus.org/browse/MEV-455 > Project: Maven Evangelism > Issue Type: Bug > Reporter: nicolas de loof > > I'm using Archiva as a maven proxy, that verify checksums when downloading > artifact. My archiva.log shwo some invalid checksum on http://repo1.maven.org > : > commons-chain/commons-chain/1.1/commons-chain-1.1.pom > org/codehaus/plexus/plexus-compiler/1.5.2/plexus-compiler-1.5.2.pom > commons-validator/commons-validator/1.3.0/commons-validator-1.3.0-sources.jar > struts/struts/1.2.9/struts-1.2.9-sources.jar > junit/junit/3.8.2/junit-3.8.2.pom > junit/junit/3.8.2/junit-3.8.2.jar > junit/junit/3.8.2/junit-3.8.2-sources.jar > junit/junit/3.8.2/junit-3.8.2-javadoc.jar > easymock/easymock/1.2_Java1.3/easymock-1.2_Java1.3-sources.jar > org/codehaus/plexus/plexus-compilers/1.5.2/plexus-compilers-1.5.2.pom > org/apache/maven/surefire/surefire-providers/2.0/surefire-providers-2.0.pom > org/apache/maven/plugins/maven-project-info-reports-plugin/maven-metadata.xml > it/could/webdav/0.4/webdav-0.4.pom > com/jcraft/jsch/0.1.27/jsch-0.1.27.pom > com/jcraft/jsch/0.1.27/jsch-0.1.27.jar > it/could/webdav/0.4/webdav-0.4.pom > it/could/webdav/0.4/webdav-0.4.jar -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira