Re: [jetty-users] Fingerprint verification for jetty-uber jar from maven

[Bharathi Sivaramakrishnan <bharathi.sivaramakrishnan@xxxxxxxxxx>]

 

Hello,

We intend to deploy our application using embedded jetty, and I was reading through the instructions at:  http://www.eclipse.org/jetty/documentation/current/advanced-embedding.html, which recommends downloading the jetty-uber jar from maven.

 

I was wondering if there is a way to get some sort of fingerprint from eclipse.org to verify the maven download is the official one. Is there a way to verify that the bits that come from maven haven’t been tampered with by someone operating a maven repo or mirror?

 

Thanks,

Bharathi Sivaramakrishnan

(Principal Member of Technical Staff, Oracle Corporation)