gora-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Lewis John McGibbney (Commented) (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (GORA-71) Download page does not include pointer to KEYS file or hashes
Date Mon, 26 Dec 2011 19:36:30 GMT

    [ https://issues.apache.org/jira/browse/GORA-71?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13176000#comment-13176000

Lewis John McGibbney commented on GORA-71:

Hi Guys. To address this issue I think we are going to need to reconsider our formatting approach
for releases.xml [1]. Pointing guys to the KEYS file is no problem as this can be specified
as [2], however pointing them to the md5 distros (which is what I am interpreting as 'links
for hashes') is going to be slightly harder as it appears we haven't published any md5 distros
to date!!!

Linking from ASF hosts is not going to be a problem as they resolve themselves similar to

Checking sigs and hashes should be added to releases.xml similar to [3], but maybe not quite
as detailed.... we don't want to scare people off :0)

Can I get thoughts on this please, specifially relating to creating and publishing the hashes?
I am treading on deep water in this area and could do with some guidance. Thank you.

[1] https://svn.apache.org/repos/asf/incubator/gora/site/author/src/documentation/content/xdocs/releases.xml

[2] http://www.apache.org/dyn/closer.cgi/incubator/gora/KEYS
[3] http://httpd.apache.org/download.cgi
> Download page does not include pointer to KEYS file or hashes
> -------------------------------------------------------------
>                 Key: GORA-71
>                 URL: https://issues.apache.org/jira/browse/GORA-71
>             Project: Gora
>          Issue Type: Bug
>            Reporter: Sebb
>            Assignee: Lewis John McGibbney
>            Priority: Critical
> The download page includes a link to the archive and its gpg signatiure, but there is
no link to the KEYS file nor any links for hashes.
> These must all be linked from ASF hosts.
> Also, the download directory contains a zip archive, but this is not listed on the download
> The download page should also give information on how to check sigs and hashes.

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira


View raw message