You are viewing a plain text version of this content. The canonical link for it is here.
Posted to svn@forrest.apache.org by cr...@apache.org on 2008/01/29 04:24:40 UTC
svn commit: r616154 - /forrest/trunk/site-author/content/xdocs/mirrors.html
Author: crossley
Date: Mon Jan 28 19:24:39 2008
New Revision: 616154
URL: http://svn.apache.org/viewvc?rev=616154&view=rev
Log:
Add the Release Manager's Key Id, so that they know how to verify PGP.
Add sections to the "verify" section to make procedures more clear.
Modified:
forrest/trunk/site-author/content/xdocs/mirrors.html
Modified: forrest/trunk/site-author/content/xdocs/mirrors.html
URL: http://svn.apache.org/viewvc/forrest/trunk/site-author/content/xdocs/mirrors.html?rev=616154&r1=616153&r2=616154&view=diff
==============================================================================
--- forrest/trunk/site-author/content/xdocs/mirrors.html (original)
+++ forrest/trunk/site-author/content/xdocs/mirrors.html Mon Jan 28 19:24:39 2008
@@ -96,10 +96,11 @@
<h1><a name="verify" />Verify releases</h1>
<p>
It is essential that you verify the integrity of the downloaded files
- using the PGP and MD5 signatures. MD5 verification ensures the file was
+ using the MD5 and PGP signatures. MD5 verification ensures the file was
not corrupted or tampered with. PGP verification ensures that the file
came from a certain person.
</p>
+ <h2><a name="pgp" />PGP Signature</h2>
<p>
The PGP signatures can be verified using
<a href="http://www.pgpi.org/">PGP</a> or
@@ -124,8 +125,15 @@
% gpg --import KEYS
% gpg --verify apache-forrest-X.Y.tar.gz.asc
</pre>
+
+ <p>
+ The files <code>apache-forrest-0.8.*</code>
+ are signed by David Crossley <code>23CB7A2A</code>
+ </p>
+
+ <h2><a name="md5" />MD5 Checksum</h2>
<p>
- To verify the MD5 signature on the files, you need to use a program called
+ To verify the MD5 checksum on the files, you need to use a program called
<code>md5</code> or <code>md5sum</code>, which is included in many unix
distributions. It is also available as part of
<a href="http://www.gnu.org/software/textutils/textutils.html">GNU