jira-importer commented on issue #202: URL: https://github.com/apache/maven-install-plugin/issues/202#issuecomment-2771848891
**[Benjamin Bentmann](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=bentmann)** commented > Can all versions of Maven consume a checksum with the filename appended? > As per MNG-797, many versions can handle the format requested by Niall. Only SHA-1 checksums in OpenSSL format were not handled (MNG-1349). What might need further investigation is how we deal with local vs. remote checksums. Niall's patches are straightforward but their effect would be limited to the local repo. The checksums deployed to remote repos are created by the Maven core, i.e. are independent from the checksums created by the Install Plugin. Unless we sync the formats between core and Install Plugin, the format of a checksum file depends on whether it was locally installed or downloaded remotely. Not sure how useful that is. When we wanted to sync the formats, we would need a way to configure the format used by the Maven core. Not sure how to do that without expanding the POM structure, i.e. have some new elements within `<distributiionManagement>`. To avoid the configuration issue and have equal local and remote checksums, I suggest we start off by hard-coding the format suggested by Niall in his first patch, both for the Install Plugin and the Maven core: ``` <checksum><space>*<filename><newline> ``` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...@maven.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
