Asc files often do not have checksums

Description

When downloading asc files from the remote maven repository things often get quite noisy because the asc file doesn't have a checksum and maven complains that it cannot find it,

Next time I'm in the area I should look see whether there is a way to tell maven not to care (anything we download is going to be sig checked or used as a sig check so we really don't care about correct transmission)

Environment

None

Activity

Rod Widdowson 
January 24, 2022 at 8:13 PM

Nothing to see here folks, move on

Rod Widdowson 
January 24, 2022 at 8:12 PM

The is now understood.

  • signatures have checksums stripped by maven

  • By default this will warn as per the log messages

  • if a repo is marked as fail on checksum errors then you silently do not get the asc file.

 

https://issues.apache.org/jira/browse/MRESOLVER-236

Rod Widdowson 
January 22, 2022 at 2:44 PM

org.eclipse.aether.internal.impl.Maven2RepositoryLayoutFactory line 196

Which is why we get the failures.

Now, why does that only matter for -P central-disabled

Rod Widdowson 
November 28, 2021 at 4:31 PM

Need to find an example and try it. Not having much joy so far

Known Error

Details

Assignee

Reporter

Created November 24, 2021 at 3:09 PM
Updated January 24, 2022 at 8:13 PM
Resolved January 24, 2022 at 8:13 PM