Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make fingerprint.pax available for download #1552

Closed
John-A-Davies opened this issue Jul 29, 2020 · 3 comments
Closed

Make fingerprint.pax available for download #1552

John-A-Davies opened this issue Jul 29, 2020 · 3 comments
Assignees
Milestone

Comments

@John-A-Davies
Copy link
Contributor

Customer content

Is your feature request related to a problem? Please describe.
All users need to be able to dowload fingerprint.pax. If a user wants to run the fingerprint check, access to fingerprint.pax is mandatory for releases before 1.14.0 and optional afterwards.

Describe the solution you'd like
fingerprint.pax is located where all users can download it.

Describe alternatives you've considered
BOX note.

Additional context
Perhaps promote it to Artifactory if and when appropriate.

Engineering team info (eg https://github.com/zowe/explorer-jes/issues/4)

As a user or L2 support agent,
I want to be able to verify the authenticity of a Zowe runtime
so that I can be sure it has the same content as the official, released version.

Details/notes
Doc will need updating to point to new location.

Acceptance Criteria

*Scenario 1: [Title]
Given [context]
And [some more context]...
When [event]
Then [outcome]
 And [another outcome]...

@John-A-Davies John-A-Davies added this to the 20PI2S2 milestone Jul 29, 2020
@John-A-Davies John-A-Davies self-assigned this Jul 29, 2020
@stevenhorsman stevenhorsman modified the milestones: 20PI2S2, 20PI3S2 Jul 31, 2020
@stevenhorsman stevenhorsman modified the milestones: 20PI3S2, Backlog Oct 7, 2020
@John-A-Davies
Copy link
Contributor Author

FYI @nkocsis @nannanli

The binary file zowe-install-packaging/files/fingerprint.pax/HashFiles.class should not be stored in the source repository because it gives a high-priority OMP scan warning. It's currently inside
zowe-install-packaging/files/fingerprint.pax.

The user documentation verify-fingerprint.html directs the user to download that pax file from this repository. The pax file should instead be placed in artifactory, in this directory
https://zowe.jfrog.io/zowe/list/libs-release-local/org/zowe/1.16.0/ or its equivalent for each Zowe release.

The build, the doc. and this repository will need to be amended.

@Martin-Zeithaml
Copy link
Contributor

As a user or L2 support agent,
I want to be able to verify the authenticity of a Zowe runtime
so that I can be sure it has the same content as the official, released version.

I believe, this is true for zwe support command (which is using verify-fingerprints feature).

@JoeNemo
Copy link
Contributor

JoeNemo commented Aug 14, 2024

This is now supported.

@JoeNemo JoeNemo closed this as completed Aug 14, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants