| From: | Vladimir Sitnikov <sitnikov(dot)vladimir(at)gmail(dot)com> |
|---|---|
| To: | John R Pierce <pierce(at)hogranch(dot)com> |
| Cc: | List <pgsql-jdbc(at)postgresql(dot)org> |
| Subject: | Re: Wrong link not pointing to the release tarball |
| Date: | 2016-01-22 19:19:00 |
| Message-ID: | CAB=Je-Hm_=ThNUobn0reyMqxV6sxA=+WsAz2Ks=vLprdLbw7mg@mail.gmail.com |
| Views: | Whole Thread | Raw Message | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-jdbc |
John>noone packaging for a released OS (using rpm, deb, etc) is going
to want to pull from git
I'm afraid you are missing the point.
Here's the URL I recommend:
https://github.com/pgjdbc/pgjdbc/archive/REL9.4.1207.tar.gz
It is a HTTPS URL of a file that never changes. That exact contents
was used to build pgjdbc 9.4.1207.
Alternatively, you might use a URL with commit ID (see [1]). Commit id
is somewhat harder to identify, but it is protected from tampering
(git tag can be recreated with different contents, but the contents of
a particular git commit id would be always the same).
What's the problem with using those kind of links?
[1]: https://github.com/pgjdbc/pgjdbc/archive/f17e2f3074a95dc767d6d896ffd696e045b48466.tar.gz
Vladimir
| From | Date | Subject | |
|---|---|---|---|
| Next Message | John R Pierce | 2016-01-22 19:26:18 | Re: Wrong link not pointing to the release tarball |
| Previous Message | John R Pierce | 2016-01-22 18:58:32 | Re: Wrong link not pointing to the release tarball |