title: Why does Maven report "Checksum validation failed, no checksums available from the repository"?
body: <p>I am trying to create a custom Maven repository using the 3 steps described here - <a href="http://www.javaworld.com/community/node/3968" rel="noreferrer">http://www.javaworld.com/community/node/3968</a>. So, I followed all the steps and here I have the repository:</p>
  
  <pre><code>D:\maven2&gt;dir /s/b
  D:\maven2\com
  D:\maven2\org
  D:\maven2\web.config
  D:\maven2\com\safenet
  D:\maven2\com\safenet\hasp
  D:\maven2\com\safenet\hasp\1
  D:\maven2\com\safenet\hasp\maven-metadata.xml
  D:\maven2\com\safenet\hasp\maven-metadata.xml.md5
  D:\maven2\com\safenet\hasp\maven-metadata.xml.sha1
  D:\maven2\com\safenet\hasp\1\hasp-1.jar
  D:\maven2\com\safenet\hasp\1\hasp-1.pom
  D:\maven2\com\safenet\hasp\1\_maven.repositories
  D:\maven2\org\jnetpcap
  D:\maven2\org\jnetpcap\jnetcap
  D:\maven2\org\jnetpcap\jnetcap\1.3
  D:\maven2\org\jnetpcap\jnetcap\maven-metadata.xml
  D:\maven2\org\jnetpcap\jnetcap\maven-metadata.xml.md5
  D:\maven2\org\jnetpcap\jnetcap\maven-metadata.xml.sha1
  D:\maven2\org\jnetpcap\jnetcap\1.3\jnetcap-1.3.jar
  D:\maven2\org\jnetpcap\jnetcap\1.3\jnetcap-1.3.pom
  D:\maven2\org\jnetpcap\jnetcap\1.3\_maven.repositories
  
  D:\maven2&gt;type com\safenet\hasp\maven-metadata.xml
  &lt;?xml version="1.0" encoding="UTF-8"?&gt;
  &lt;metadata&gt;
    &lt;groupId&gt;com.safenet&lt;/groupId&gt;
    &lt;artifactId&gt;hasp&lt;/artifactId&gt;
    &lt;versioning&gt;
      &lt;release&gt;1&lt;/release&gt;
      &lt;versions&gt;
        &lt;version&gt;1&lt;/version&gt;
      &lt;/versions&gt;
      &lt;lastUpdated&gt;20130108125547&lt;/lastUpdated&gt;
    &lt;/versioning&gt;
  &lt;/metadata&gt;
  
  D:\maven2&gt;type org\jnetpcap\jnetcap\maven-metadata.xml.md5
  297455697088aad6bdbe256d48fb0676 *maven-metadata.xml
  
  D:\maven2&gt;type org\jnetpcap\jnetcap\maven-metadata.xml.sha1
  f86d93727a76525f42f1b67997020e1a9a41b948 *maven-metadata.xml
  
  D:\maven2&gt;type org\jnetpcap\jnetcap\1.3\jnetcap-1.3.pom
  &lt;?xml version="1.0" encoding="UTF-8"?&gt;
  &lt;project xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd" xmlns="http://maven.apache.org/POM/4.0.0"
      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"&gt;
    &lt;modelVersion&gt;4.0.0&lt;/modelVersion&gt;
    &lt;groupId&gt;org.jnetpcap&lt;/groupId&gt;
    &lt;artifactId&gt;jnetcap&lt;/artifactId&gt;
    &lt;version&gt;1.3&lt;/version&gt;
    &lt;description&gt;POM was created from install:install-file&lt;/description&gt;
  &lt;/project&gt;
  
  D:\maven2&gt;
  </code></pre>
  
  <p>Now I am trying to use the hasp artifact in a pom file like this:</p>
  
  <pre><code>&lt;dependency&gt;
    &lt;groupId&gt;com.safenet&lt;/groupId&gt;
    &lt;artifactId&gt;hasp&lt;/artifactId&gt;
    &lt;version&gt;1&lt;/version&gt;
    &lt;scope&gt;provided&lt;/scope&gt;
  &lt;/dependency&gt;
  </code></pre>
  
  <p>And the repository is referenced like this:</p>
  
  <pre><code>&lt;repository&gt;
    &lt;releases&gt;
      &lt;enabled&gt;true&lt;/enabled&gt;
      &lt;updatePolicy&gt;always&lt;/updatePolicy&gt;
      &lt;checksumPolicy&gt;fail&lt;/checksumPolicy&gt;
    &lt;/releases&gt;
    &lt;id&gt;dev-builder&lt;/id&gt;
    &lt;name&gt;Shunra private repository&lt;/name&gt;
    &lt;url&gt;http://dev-builder/maven2&lt;/url&gt;
    &lt;layout&gt;default&lt;/layout&gt;
  &lt;/repository&gt;
  </code></pre>
  
  <p>Unfortunately, it does not work as expected:</p>
  
  <pre><code>[INFO] Building license 0.0.1
  [INFO] ------------------------------------------------------------------------
  Downloading: http://dev-builder/maven2/com/safenet/hasp/1/hasp-1.pom
  [WARNING] The POM for com.safenet:hasp:jar:1 is missing, no dependency information available
  Downloading: http://dev-builder/maven2/com/safenet/hasp/1/hasp-1.jar
  [INFO] ------------------------------------------------------------------------
  [INFO] Reactor Summary:
  [INFO]
  [INFO] Local Driver Proxy ................................ SUCCESS [2.579s]
  [INFO] Emulation API ..................................... SUCCESS [1.637s]
  [INFO] util.logging ...................................... SUCCESS [1.023s]
  [INFO] Infra ............................................. SUCCESS [0.250s]
  [INFO] dtos .............................................. SUCCESS [0.691s]
  [INFO] commons ........................................... SUCCESS [0.426s]
  [INFO] license ........................................... FAILURE [2.195s]
  [INFO] core .............................................. SKIPPED
  [INFO] vcat .............................................. SKIPPED
  [INFO] VCat-build ........................................ SKIPPED
  [INFO] ------------------------------------------------------------------------
  [INFO] BUILD FAILURE
  [INFO] ------------------------------------------------------------------------
  [INFO] Total time: 9.044s
  [INFO] Finished at: Tue Jan 15 21:27:43 EST 2013
  [INFO] Final Memory: 6M/15M
  [INFO] ------------------------------------------------------------------------
  [ERROR] Failed to execute goal on project license: Could not resolve dependencies for project com.shunra:license:jar:0.0.1: Could not transfer artifact com.safenet:hasp:jar:1 from/to dev-builder (http
  ://dev-builder/maven2): Checksum validation failed, no checksums available from the repository -&gt; [Help 1]
  [ERROR]
  [ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
  [ERROR] Re-run Maven using the -X switch to enable full debug logging.
  [ERROR]
  [ERROR] For more information about the errors and possible solutions, please read the following articles:
  [ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/DependencyResolutionException
  [ERROR]
  [ERROR] After correcting the problems, you can resume the build with the command
  [ERROR]   mvn &lt;goals&gt; -rf :license
  c:\dev\shunra\Application\Builder\build\vcat&gt;
  </code></pre>
  
  <p>I have no idea what is the problem with it. The md5 and sha1 files were created using the cygwin port of the md5sum and sha1sum utilities. Still, Maven reports bad checksum.</p>