You are viewing a plain text version of this content. The canonical link for it is here.
Posted to svn@forrest.apache.org by cr...@apache.org on 2008/01/29 04:24:40 UTC

svn commit: r616154 - /forrest/trunk/site-author/content/xdocs/mirrors.html

Author: crossley
Date: Mon Jan 28 19:24:39 2008
New Revision: 616154

URL: http://svn.apache.org/viewvc?rev=616154&view=rev
Log:
Add the Release Manager's Key Id, so that they know how to verify PGP.
Add sections to the "verify" section to make procedures more clear.

Modified:
    forrest/trunk/site-author/content/xdocs/mirrors.html

Modified: forrest/trunk/site-author/content/xdocs/mirrors.html
URL: http://svn.apache.org/viewvc/forrest/trunk/site-author/content/xdocs/mirrors.html?rev=616154&r1=616153&r2=616154&view=diff
==============================================================================
--- forrest/trunk/site-author/content/xdocs/mirrors.html (original)
+++ forrest/trunk/site-author/content/xdocs/mirrors.html Mon Jan 28 19:24:39 2008
@@ -96,10 +96,11 @@
     <h1><a name="verify" />Verify releases</h1>
     <p>
       It is essential that you verify the integrity of the downloaded files
-      using the PGP and MD5 signatures. MD5 verification ensures the file was
+      using the MD5 and PGP signatures. MD5 verification ensures the file was
       not corrupted or tampered with. PGP verification ensures that the file
       came from a certain person.
     </p>
+    <h2><a name="pgp" />PGP Signature</h2>
     <p>
       The PGP signatures can be verified using
       <a href="http://www.pgpi.org/">PGP</a> or
@@ -124,8 +125,15 @@
 % gpg --import KEYS
 % gpg --verify apache-forrest-X.Y.tar.gz.asc
 </pre>
+
+    <p>
+    The files <code>apache-forrest-0.8.*</code>
+    are signed by David Crossley <code>23CB7A2A</code>
+    </p>
+
+    <h2><a name="md5" />MD5 Checksum</h2>
     <p>
-      To verify the MD5 signature on the files, you need to use a program called
+      To verify the MD5 checksum on the files, you need to use a program called
       <code>md5</code> or <code>md5sum</code>, which is included in many unix
       distributions. It is also available as part of
       <a href="http://www.gnu.org/software/textutils/textutils.html">GNU