You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@mina.apache.org by tw...@apache.org on 2025/08/23 17:22:16 UTC
(mina-site) 02/02: Add "Verifying Releases" sidebar link
This is an automated email from the ASF dual-hosted git repository.
twolf pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/mina-site.git
commit df111bc37c05cfce99e9ce9c5c8f1ec1377104c9
Author: Thomas Wolf <tw...@apache.org>
AuthorDate: Tue Aug 19 21:40:08 2025 +0200
Add "Verifying Releases" sidebar link
Someone complained a while back that our KEYS file wasn't linked
anywhere. There was already an incomplete validating-release.md, but
it wasn't linked from anywhere.
Rename that to verifying-releases.md and complete it; link it from
the sidebar menu.
---
layouts/_default/baseof.html | 1 +
source/sshd-project/downloads.md | 2 ++
source/validating-release.md | 16 ----------------
source/verifying-releases.md | 18 ++++++++++++++++++
4 files changed, 21 insertions(+), 16 deletions(-)
diff --git a/layouts/_default/baseof.html b/layouts/_default/baseof.html
index 0327e7b8a..bd7dc415f 100644
--- a/layouts/_default/baseof.html
+++ b/layouts/_default/baseof.html
@@ -57,6 +57,7 @@
<ul>
<li><a href="/mailing-lists.html" class="external-link" rel="nofollow">Mailing lists & IRC</a></li>
<li><a href="/issue-tracking.html" class="external-link" rel="nofollow">Issue tracking</a></li>
+ <li><a href="/verifying-releases.html" class="external-link" rel="nofollow">Verifying Releases</a></li>
</ul>
<h5>Community</h5>
diff --git a/source/sshd-project/downloads.md b/source/sshd-project/downloads.md
index 832ca206b..738c8215e 100644
--- a/source/sshd-project/downloads.md
+++ b/source/sshd-project/downloads.md
@@ -15,6 +15,8 @@ See the [release notes](download_{{< version_sshd >}}.html).
* [Apache Mina SSHD {{< version_sshd >}} Binary (.tar.gz)](https://www.apache.org/dyn/closer.lua/mina/sshd/{{< version_sshd >}}/apache-sshd-{{< version_sshd >}}.tar.gz) [PGP](https://www.apache.org/dist/mina/sshd/{{< version_sshd >}}/apache-sshd-{{< version_sshd >}}.tar.gz.asc) [SHA512](https://www.apache.org/dist/mina/sshd/{{< version_sshd >}}/apache-sshd-{{< version_sshd >}}.tar.gz.sha512)
* [Apache Mina SSHD {{< version_sshd >}} Binary (.zip)](https://www.apache.org/dyn/closer.lua/mina/sshd/{{< version_sshd >}}/apache-sshd-{{< version_sshd >}}.zip) [PGP](https://www.apache.org/dist/mina/sshd/{{< version_sshd >}}/apache-sshd-{{< version_sshd >}}.zip.asc) [SHA512](https://www.apache.org/dist/mina/sshd/{{< version_sshd >}}/apache-sshd-{{< version_sshd >}}.zip.sha512)
+See also [Verifying Releases](/verifying-releases.html).
+
# Development snapshots
You can [build](building.html) the latest version from [sources](sources.html).
diff --git a/source/validating-release.md b/source/validating-release.md
deleted file mode 100644
index 374d012d1..000000000
--- a/source/validating-release.md
+++ /dev/null
@@ -1,16 +0,0 @@
----
-title: Verifying Release
----
-
-# Validating Release
-
-Down the GPG keys and import them
-
-```bash
-wget https://downloads.apache.org/mina/KEYS
-gpg --import KEYS
-```
-
-Download the release and verify checksums and signatures
-
-WIP
diff --git a/source/verifying-releases.md b/source/verifying-releases.md
new file mode 100644
index 000000000..7ce35bc84
--- /dev/null
+++ b/source/verifying-releases.md
@@ -0,0 +1,18 @@
+---
+title: Verifying Releases
+---
+
+# Verifying Releases
+
+PGP signing public keys for all releases are available in the [Apache MINA KEYS file](https://downloads.apache.org/mina/KEYS).
+
+Download the GPG keys and import them:
+
+```bash
+wget https://downloads.apache.org/mina/KEYS
+gpg --import KEYS
+```
+
+(Signing keys are also available via the usual key servers.)
+
+Download the release and verify checksums and signatures following the general guidelines given at [Verifying ASF Releases](https://www.apache.org/info/verification.html).