You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@lucene.apache.org by ja...@apache.org on 2020/06/02 12:25:48 UTC
svn commit: r39896 - /release/lucene/java/README.html
Author: janhoy
Date: Tue Jun 2 12:25:48 2020
New Revision: 39896
Log:
Refresh downloads README for Lucene
Modified:
release/lucene/java/README.html
Modified: release/lucene/java/README.html
==============================================================================
--- release/lucene/java/README.html (original)
+++ release/lucene/java/README.html Tue Jun 2 12:25:48 2020
@@ -1,11 +1,8 @@
-<img src="http://lucene.apache.org/images/lucene_logo_green_300.png" height="75" align="right">
<h1>Apache Lucene Java Downloads</h1>
<ul>
<li><a href="#mirror">Use a mirror</a></li>
- <li><a href="#changes">Changes</a></li>
- <li><a href="#sig">Signatures</a></li>
- <li><a href="#archive">Older Versions</a></li>
+ <li><a href="#changes">More information</a></li>
</ul>
<a name="mirror"><h2>Use a mirror</h2></a>
@@ -13,59 +10,8 @@
href="http://www.apache.org/dyn/closer.lua/lucene/java/">a nearby
mirror site</a>, not directly from www.apache.org.</p>
-<a name="changes"><h2>Changes</h2></a>
-
-<p>The changes in this release are detailed in the release notes.</p>
-
-<p>Thank you for using <a href="http://lucene.apache.org/java/">Apache Lucene</a>.</p>
-
-<a name="sig"><h2>Signatures and hashes</h2></a>
-
-<p>All official source and binary releases are digitally signed using GnuPG.
- You are encouraged to verify that your download is the official one by verifying
- the digital signature. To do this you need, in addition to the downloaded file:
-</p>
-
-<ul>
- <li>the pgp or gpg software</li>
- <li>the official <samp><em>KEYS</em></samp> file for the project</li>
- <li>the <samp><em>file</em>.asc</samp> file corresponding to your download</li>
-</ul>
-
-<p><b>Always download the <em>KEYS</em> and <em>.asc</em> files directly from the Apache site at
- <<a href="https://www.apache.org/dist/lucene/java/"><samp>https://www.apache.org/dist/lucene/java/</samp></a>>,
- and always over HTTPS. Never trust KEYS from a mirror site. <a href="https://www.apache.org/info/verification.html">Read more</a></b></p>
-
-<pre>Always test available signatures, <i>e.g.</i>,
-$ pgpk -a KEYS
-$ pgpk lucene-x.y.z.tar.gz.asc
-or,
-$ pgp -ka KEYS
-$ pgp lucene-x.y.z.tar.gz.asc
-or,
-$ gpg --import KEYS
-$ gpg --verify lucene-x.y.z.tar.gz.asc
-</pre>
-
-<h3>Checking the hashes</h3>
-<p>
- Alongside the release artifacts in the official Apache dist site you will also find other
- files providing checksum hashes for each file, with suffix .sha1, .sha512. or .md5.
- E.g. for <samp>lucene-x.y.z.tgz</samp> the <samp>lucene-x.y.z.tgz.sha1</samp> file provides
- the SHA-1 checksum. These are useful to verify that your download was complete and valid,
- but will not prove that your download was digitally signed by an actual Apache committer.
- For that you must check the .asc signature.
-</p>
-
-<pre>Calculate the checksum of your download and compare to the contents of the checksum files
-$ shasum [-a 512] lucene-x.y.z.tgz
-$ md5 lucene-x.y.z.tgz
-</pre>
-
-<a name="archive"><h2>Older Versions</h2></a>
-<p>
-Older versions of Lucene Java can be found on <a
-href="http://archive.apache.org/dist/lucene/java/">archive.apache.org</a>.
-</p>
+<a name="changes"><h2>More information</h2></a>
+<p>Please visit the <a href="https://lucene.apache.org/java/downloads.html">Apache Lucene Downloads</a> page for
+more information about the product including how to verify your download.</p>
<!-- $HeadURL: http://svn.apache.org/repos/asf/lucene/java/dist/README.html $ -->
<!-- $Id: README.html 714097 2008-11-14 18:44:49Z hossman $ -->