You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@gora.apache.org by "Sebb (Created) (JIRA)" <ji...@apache.org> on 2011/12/19 13:03:30 UTC
[jira] [Created] (GORA-71) Download page does not include pointer
to KEYS file or hashes
Download page does not include pointer to KEYS file or hashes
-------------------------------------------------------------
Key: GORA-71
URL: https://issues.apache.org/jira/browse/GORA-71
Project: Gora
Issue Type: Bug
Reporter: Sebb
Priority: Critical
The download page includes a link to the archive and its gpg signatiure, but there is no link to the KEYS file nor any links for hashes.
These must all be linked from ASF hosts.
Also, the download directory contains a zip archive, but this is not listed on the download page.
The download page should also give information on how to check sigs and hashes.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
Re: [jira] [Commented] (GORA-71) Download page does not include
pointer to KEYS file or hashes
Posted by "Mattmann, Chris A (388J)" <ch...@jpl.nasa.gov>.
Hey Lewis,
I'll try and help out and take a look here today.
Cheers,
Chris
On Jan 5, 2012, at 6:38 AM, Lewis John Mcgibbney wrote:
> Well it looks like Sebb has spoken and at least we know where to go
> next. I must admit guys, I am pretty stuck looking for where to
> resolve these URLs for the ASF /dist server
>
> I can sort out anything that points to thde mirror, I just don't know
> what the URL is for the ASF /dist server... any hints here?
>
> On Thu, Jan 5, 2012 at 1:26 AM, Sebb (Commented) (JIRA) <ji...@apache.org> wrote:
>>
>> [ https://issues.apache.org/jira/browse/GORA-71?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13180080#comment-13180080 ]
>>
>> Sebb commented on GORA-71:
>> --------------------------
>>
>> The hashes need to be linked from the ASF /dist server only - they are not mirrored.
>>
>> Although the sigs are mirrored, the links should still point to the ASF server, not the mirror.
>>
>> Only the archives should be linked to the mirror.
>>
>>
>>> Download page does not include pointer to KEYS file or hashes
>>> -------------------------------------------------------------
>>>
>>> Key: GORA-71
>>> URL: https://issues.apache.org/jira/browse/GORA-71
>>> Project: Gora
>>> Issue Type: Bug
>>> Reporter: Sebb
>>> Assignee: Lewis John McGibbney
>>> Priority: Critical
>>>
>>> The download page includes a link to the archive and its gpg signatiure, but there is no link to the KEYS file nor any links for hashes.
>>> These must all be linked from ASF hosts.
>>> Also, the download directory contains a zip archive, but this is not listed on the download page.
>>> The download page should also give information on how to check sigs and hashes.
>>
>> --
>> This message is automatically generated by JIRA.
>> If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
>> For more information on JIRA, see: http://www.atlassian.com/software/jira
>>
>>
>
>
>
> --
> Lewis
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Chris Mattmann, Ph.D.
Senior Computer Scientist
NASA Jet Propulsion Laboratory Pasadena, CA 91109 USA
Office: 171-266B, Mailstop: 171-246
Email: chris.a.mattmann@nasa.gov
WWW: http://sunset.usc.edu/~mattmann/
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Adjunct Assistant Professor, Computer Science Department
University of Southern California, Los Angeles, CA 90089 USA
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Re: [jira] [Commented] (GORA-71) Download page does not include
pointer to KEYS file or hashes
Posted by Lewis John Mcgibbney <le...@gmail.com>.
Well it looks like Sebb has spoken and at least we know where to go
next. I must admit guys, I am pretty stuck looking for where to
resolve these URLs for the ASF /dist server
I can sort out anything that points to thde mirror, I just don't know
what the URL is for the ASF /dist server... any hints here?
On Thu, Jan 5, 2012 at 1:26 AM, Sebb (Commented) (JIRA) <ji...@apache.org> wrote:
>
> [ https://issues.apache.org/jira/browse/GORA-71?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13180080#comment-13180080 ]
>
> Sebb commented on GORA-71:
> --------------------------
>
> The hashes need to be linked from the ASF /dist server only - they are not mirrored.
>
> Although the sigs are mirrored, the links should still point to the ASF server, not the mirror.
>
> Only the archives should be linked to the mirror.
>
>
>> Download page does not include pointer to KEYS file or hashes
>> -------------------------------------------------------------
>>
>> Key: GORA-71
>> URL: https://issues.apache.org/jira/browse/GORA-71
>> Project: Gora
>> Issue Type: Bug
>> Reporter: Sebb
>> Assignee: Lewis John McGibbney
>> Priority: Critical
>>
>> The download page includes a link to the archive and its gpg signatiure, but there is no link to the KEYS file nor any links for hashes.
>> These must all be linked from ASF hosts.
>> Also, the download directory contains a zip archive, but this is not listed on the download page.
>> The download page should also give information on how to check sigs and hashes.
>
> --
> This message is automatically generated by JIRA.
> If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
> For more information on JIRA, see: http://www.atlassian.com/software/jira
>
>
--
Lewis
[jira] [Commented] (GORA-71) Download page does not include pointer
to KEYS file or hashes
Posted by "Lewis John McGibbney (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/GORA-71?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13182515#comment-13182515 ]
Lewis John McGibbney commented on GORA-71:
------------------------------------------
Dynamite Enis, Thanks for this.
> Download page does not include pointer to KEYS file or hashes
> -------------------------------------------------------------
>
> Key: GORA-71
> URL: https://issues.apache.org/jira/browse/GORA-71
> Project: Gora
> Issue Type: Bug
> Reporter: Sebb
> Assignee: Lewis John McGibbney
> Priority: Critical
>
> The download page includes a link to the archive and its gpg signatiure, but there is no link to the KEYS file nor any links for hashes.
> These must all be linked from ASF hosts.
> Also, the download directory contains a zip archive, but this is not listed on the download page.
> The download page should also give information on how to check sigs and hashes.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (GORA-71) Download page does not include pointer
to KEYS file or hashes
Posted by "Lewis John McGibbney (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/GORA-71?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13173217#comment-13173217 ]
Lewis John McGibbney commented on GORA-71:
------------------------------------------
Hi Sebb, just so I can get this sorted out ASAP, I wonder if you could fire up a link which displays the kind of implementation which best addresses all the point you make above. I will commit to getting this sorted out.
Thank you for any info you can provide.
> Download page does not include pointer to KEYS file or hashes
> -------------------------------------------------------------
>
> Key: GORA-71
> URL: https://issues.apache.org/jira/browse/GORA-71
> Project: Gora
> Issue Type: Bug
> Reporter: Sebb
> Priority: Critical
>
> The download page includes a link to the archive and its gpg signatiure, but there is no link to the KEYS file nor any links for hashes.
> These must all be linked from ASF hosts.
> Also, the download directory contains a zip archive, but this is not listed on the download page.
> The download page should also give information on how to check sigs and hashes.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Assigned] (GORA-71) Download page does not include pointer
to KEYS file or hashes
Posted by "Lewis John McGibbney (Assigned) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/GORA-71?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Lewis John McGibbney reassigned GORA-71:
----------------------------------------
Assignee: Lewis John McGibbney
> Download page does not include pointer to KEYS file or hashes
> -------------------------------------------------------------
>
> Key: GORA-71
> URL: https://issues.apache.org/jira/browse/GORA-71
> Project: Gora
> Issue Type: Bug
> Reporter: Sebb
> Assignee: Lewis John McGibbney
> Priority: Critical
>
> The download page includes a link to the archive and its gpg signatiure, but there is no link to the KEYS file nor any links for hashes.
> These must all be linked from ASF hosts.
> Also, the download directory contains a zip archive, but this is not listed on the download page.
> The download page should also give information on how to check sigs and hashes.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (GORA-71) Download page does not include pointer
to KEYS file or hashes
Posted by "Sebb (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/GORA-71?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13180080#comment-13180080 ]
Sebb commented on GORA-71:
--------------------------
The hashes need to be linked from the ASF /dist server only - they are not mirrored.
Although the sigs are mirrored, the links should still point to the ASF server, not the mirror.
Only the archives should be linked to the mirror.
> Download page does not include pointer to KEYS file or hashes
> -------------------------------------------------------------
>
> Key: GORA-71
> URL: https://issues.apache.org/jira/browse/GORA-71
> Project: Gora
> Issue Type: Bug
> Reporter: Sebb
> Assignee: Lewis John McGibbney
> Priority: Critical
>
> The download page includes a link to the archive and its gpg signatiure, but there is no link to the KEYS file nor any links for hashes.
> These must all be linked from ASF hosts.
> Also, the download directory contains a zip archive, but this is not listed on the download page.
> The download page should also give information on how to check sigs and hashes.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (GORA-71) Download page does not include pointer
to KEYS file or hashes
Posted by "Lewis John McGibbney (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/GORA-71?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13176255#comment-13176255 ]
Lewis John McGibbney commented on GORA-71:
------------------------------------------
Most of this has now been committed. I would ask for people to review the Gora site and SVN site docs to see if/where we can improve further.
I am slightly concerned that we have not published any md5's... can anyone provide info on how we can resolve this before asking Sebb to review and comment.
Thanks
> Download page does not include pointer to KEYS file or hashes
> -------------------------------------------------------------
>
> Key: GORA-71
> URL: https://issues.apache.org/jira/browse/GORA-71
> Project: Gora
> Issue Type: Bug
> Reporter: Sebb
> Assignee: Lewis John McGibbney
> Priority: Critical
>
> The download page includes a link to the archive and its gpg signatiure, but there is no link to the KEYS file nor any links for hashes.
> These must all be linked from ASF hosts.
> Also, the download directory contains a zip archive, but this is not listed on the download page.
> The download page should also give information on how to check sigs and hashes.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (GORA-71) Download page does not include pointer
to KEYS file or hashes
Posted by "Lewis John McGibbney (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/GORA-71?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13176011#comment-13176011 ]
Lewis John McGibbney commented on GORA-71:
------------------------------------------
Log4j has a really clean page download page, I think we should implement something like this
> Download page does not include pointer to KEYS file or hashes
> -------------------------------------------------------------
>
> Key: GORA-71
> URL: https://issues.apache.org/jira/browse/GORA-71
> Project: Gora
> Issue Type: Bug
> Reporter: Sebb
> Assignee: Lewis John McGibbney
> Priority: Critical
>
> The download page includes a link to the archive and its gpg signatiure, but there is no link to the KEYS file nor any links for hashes.
> These must all be linked from ASF hosts.
> Also, the download directory contains a zip archive, but this is not listed on the download page.
> The download page should also give information on how to check sigs and hashes.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Closed] (GORA-71) Download page does not include pointer to
KEYS file or hashes
Posted by "Sebb (Closed) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/GORA-71?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Sebb closed GORA-71.
--------------------
Looks good
> Download page does not include pointer to KEYS file or hashes
> -------------------------------------------------------------
>
> Key: GORA-71
> URL: https://issues.apache.org/jira/browse/GORA-71
> Project: Gora
> Issue Type: Bug
> Reporter: Sebb
> Assignee: Lewis John McGibbney
> Priority: Critical
>
> The download page includes a link to the archive and its gpg signatiure, but there is no link to the KEYS file nor any links for hashes.
> These must all be linked from ASF hosts.
> Also, the download directory contains a zip archive, but this is not listed on the download page.
> The download page should also give information on how to check sigs and hashes.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (GORA-71) Download page does not include pointer
to KEYS file or hashes
Posted by "Lewis John McGibbney (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/GORA-71?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13176000#comment-13176000 ]
Lewis John McGibbney commented on GORA-71:
------------------------------------------
Hi Guys. To address this issue I think we are going to need to reconsider our formatting approach for releases.xml [1]. Pointing guys to the KEYS file is no problem as this can be specified as [2], however pointing them to the md5 distros (which is what I am interpreting as 'links for hashes') is going to be slightly harder as it appears we haven't published any md5 distros to date!!!
Linking from ASF hosts is not going to be a problem as they resolve themselves similar to [2]
Checking sigs and hashes should be added to releases.xml similar to [3], but maybe not quite as detailed.... we don't want to scare people off :0)
Can I get thoughts on this please, specifially relating to creating and publishing the hashes? I am treading on deep water in this area and could do with some guidance. Thank you.
[1] https://svn.apache.org/repos/asf/incubator/gora/site/author/src/documentation/content/xdocs/releases.xml
[2] http://www.apache.org/dyn/closer.cgi/incubator/gora/KEYS
[3] http://httpd.apache.org/download.cgi
> Download page does not include pointer to KEYS file or hashes
> -------------------------------------------------------------
>
> Key: GORA-71
> URL: https://issues.apache.org/jira/browse/GORA-71
> Project: Gora
> Issue Type: Bug
> Reporter: Sebb
> Assignee: Lewis John McGibbney
> Priority: Critical
>
> The download page includes a link to the archive and its gpg signatiure, but there is no link to the KEYS file nor any links for hashes.
> These must all be linked from ASF hosts.
> Also, the download directory contains a zip archive, but this is not listed on the download page.
> The download page should also give information on how to check sigs and hashes.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (GORA-71) Download page does not include pointer
to KEYS file or hashes
Posted by "Enis Soztutar (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/GORA-71?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13182389#comment-13182389 ]
Enis Soztutar commented on GORA-71:
-----------------------------------
As per the discussion in the dev thread, I have fixed thes links to KEYS, *.md5, and *.asc files to point to official apache dist at http://www.apache.org/dist/incubator/gora/XXX. I have also added some more documentation about the release verification, which I stole from Apache-forrest web site. I am resolving the issue for now. Feel free to reopen the issue, if you spot anything. Thanks Lewis for the hard work.
> Download page does not include pointer to KEYS file or hashes
> -------------------------------------------------------------
>
> Key: GORA-71
> URL: https://issues.apache.org/jira/browse/GORA-71
> Project: Gora
> Issue Type: Bug
> Reporter: Sebb
> Assignee: Lewis John McGibbney
> Priority: Critical
>
> The download page includes a link to the archive and its gpg signatiure, but there is no link to the KEYS file nor any links for hashes.
> These must all be linked from ASF hosts.
> Also, the download directory contains a zip archive, but this is not listed on the download page.
> The download page should also give information on how to check sigs and hashes.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (GORA-71) Download page does not include pointer
to KEYS file or hashes
Posted by "Lewis John McGibbney (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/GORA-71?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13180296#comment-13180296 ]
Lewis John McGibbney commented on GORA-71:
------------------------------------------
Thanks Sebb. I'm attaching the following link for clarity
http://www.apache.org/info/verification.html
We will get on this ASAP.
> Download page does not include pointer to KEYS file or hashes
> -------------------------------------------------------------
>
> Key: GORA-71
> URL: https://issues.apache.org/jira/browse/GORA-71
> Project: Gora
> Issue Type: Bug
> Reporter: Sebb
> Assignee: Lewis John McGibbney
> Priority: Critical
>
> The download page includes a link to the archive and its gpg signatiure, but there is no link to the KEYS file nor any links for hashes.
> These must all be linked from ASF hosts.
> Also, the download directory contains a zip archive, but this is not listed on the download page.
> The download page should also give information on how to check sigs and hashes.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Issue Comment Edited] (GORA-71) Download page does not
include pointer to KEYS file or hashes
Posted by "Lewis John McGibbney (Issue Comment Edited) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/GORA-71?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13176011#comment-13176011 ]
Lewis John McGibbney edited comment on GORA-71 at 12/26/11 8:33 PM:
--------------------------------------------------------------------
Log4j has a really clean page download page, I think we should implement something like this
http://logging.apache.org/log4j/1.2/download.html
was (Author: lewismc):
Log4j has a really clean page download page, I think we should implement something like this
> Download page does not include pointer to KEYS file or hashes
> -------------------------------------------------------------
>
> Key: GORA-71
> URL: https://issues.apache.org/jira/browse/GORA-71
> Project: Gora
> Issue Type: Bug
> Reporter: Sebb
> Assignee: Lewis John McGibbney
> Priority: Critical
>
> The download page includes a link to the archive and its gpg signatiure, but there is no link to the KEYS file nor any links for hashes.
> These must all be linked from ASF hosts.
> Also, the download directory contains a zip archive, but this is not listed on the download page.
> The download page should also give information on how to check sigs and hashes.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Resolved] (GORA-71) Download page does not include pointer
to KEYS file or hashes
Posted by "Enis Soztutar (Resolved) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/GORA-71?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Enis Soztutar resolved GORA-71.
-------------------------------
Resolution: Fixed
> Download page does not include pointer to KEYS file or hashes
> -------------------------------------------------------------
>
> Key: GORA-71
> URL: https://issues.apache.org/jira/browse/GORA-71
> Project: Gora
> Issue Type: Bug
> Reporter: Sebb
> Assignee: Lewis John McGibbney
> Priority: Critical
>
> The download page includes a link to the archive and its gpg signatiure, but there is no link to the KEYS file nor any links for hashes.
> These must all be linked from ASF hosts.
> Also, the download directory contains a zip archive, but this is not listed on the download page.
> The download page should also give information on how to check sigs and hashes.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira