Re: Wrong link not pointing to the release tarball

From: Vladimir Sitnikov <sitnikov(dot)vladimir(at)gmail(dot)com>
To: John R Pierce <pierce(at)hogranch(dot)com>
Cc: List <pgsql-jdbc(at)postgresql(dot)org>
Subject: Re: Wrong link not pointing to the release tarball
Date: 2016-01-22 19:19:00
Message-ID: CAB=Je-Hm_=ThNUobn0reyMqxV6sxA=+WsAz2Ks=vLprdLbw7mg@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-jdbc

John>noone packaging for a released OS (using rpm, deb, etc) is going
to want to pull from git

I'm afraid you are missing the point.
Here's the URL I recommend:
https://github.com/pgjdbc/pgjdbc/archive/REL9.4.1207.tar.gz
It is a HTTPS URL of a file that never changes. That exact contents
was used to build pgjdbc 9.4.1207.

Alternatively, you might use a URL with commit ID (see [1]). Commit id
is somewhat harder to identify, but it is protected from tampering
(git tag can be recreated with different contents, but the contents of
a particular git commit id would be always the same).

What's the problem with using those kind of links?

[1]: https://github.com/pgjdbc/pgjdbc/archive/f17e2f3074a95dc767d6d896ffd696e045b48466.tar.gz

Vladimir

In response to

Responses

Browse pgsql-jdbc by date

  From Date Subject
Next Message John R Pierce 2016-01-22 19:26:18 Re: Wrong link not pointing to the release tarball
Previous Message John R Pierce 2016-01-22 18:58:32 Re: Wrong link not pointing to the release tarball