[jira] [Reopened] (CMIS-516) Download page does not include pointer to KEYS file or hashes, nor how to use them

["Sebb (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/CMIS-516?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Sebb reopened CMIS-516:
-----------------------

The links to the sigs and hashes are broken.

These files are intentionally not propagated to mirrors, and should only be linked to from https://www.apache.org/dist/chemistry/, e.g.

https://www.apache.org/dist/chemistry/cmislib/0.5.1/cmislib-0.5.1-py2.7.egg.asc

Also the link to the KEYS file should ideally use HTTPS:

https://www.apache.org/dist/chemistry/KEYS

> Download page does not include pointer to KEYS file or hashes, nor how to use them
> ----------------------------------------------------------------------------------
>
>                 Key: CMIS-516
>                 URL: https://issues.apache.org/jira/browse/CMIS-516
>             Project: Chemistry
>          Issue Type: Bug
>         Environment: http://chemistry.apache.org/java/download.html
>            Reporter: Sebb
>            Priority: Critical
>
> The download page must include sigs and hashes (to be downloaded from the main ASF server, not mirrors) and must include a link to the KEYS file used to verify sigs.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)