svn commit: r26009 - in /release/lucene/solr: HEADER.html README.html

[ja...@apache.org]

Author: janhoy
Date: Wed Mar 28 08:02:46 2018
New Revision: 26009

Log:
Update dist site README for Solr. Add info about verifying releases. Display at bottom, not top

Added:
    release/lucene/solr/README.html
      - copied, changed from r26008, release/lucene/solr/HEADER.html
Removed:
    release/lucene/solr/HEADER.html

Copied: release/lucene/solr/README.html (from r26008, release/lucene/solr/HEADER.html)
==============================================================================
--- release/lucene/solr/HEADER.html (original)
+++ release/lucene/solr/README.html Wed Mar 28 08:02:46 2018
@@ -1,9 +1,77 @@
-<h1><a href="http://lucene.apache.org/solr/">Solr</a> Releases</h1>
+<img src="http://lucene.apache.org/solr/assets/images/Solr_Logo_200x101.png" height="75" align="right">
+<h1>Solr Downloads</h1>
 
+<ul>
+ <li><a href="#mirror">Use a mirror</a></li>
+ <li><a href="#targz">Note About tar.gz Files</a></li>
+ <li><a href="#changes">Documentation and Changes</a></li>
+ <li><a href="#sig">Signatures and hashes</a></li>
+ <li><a href="#archive">Older Versions</a></li>
+</ul>
+
+<a name="targz"><h2>Use a mirror</h2></a>
 <p>Please make sure you're downloading from <a
-href="http://www.apache.org/dyn/closer.cgi/lucene/solr/">a nearby
+href="http://www.apache.org/dyn/closer.lua/lucene/solr/">a nearby
 mirror site</a>, not directly from www.apache.org.</p>
 
-<p>For information about working with the most current (unofficial, unreleased) 
-source code for Solr, please see the <a href="http://wiki.apache.org/solr/NightlyBuilds">Solr Wiki</a>.
+<a name="targz"><h2>Note About tar.gz Files</h2></a>
+<p>The tar files in the distribution use GNU tar extensions
+and must be untarred with a GNU compatible version of tar. The version
+of tar on Solaris will not work with these files</p>
+
+<a name="changes"><h2>Changes</h2></a>
+<p>The official Solr Reference Guide can be downloaded from the <a href="ref-guide">ref-guide</a> folder.</p>
+<p>The changes in each release are detailed in the release notes, to be found in the <code>changes</code> folder for the release.</p>
+
+<p>Thank you for using <a href="http://lucene.apache.org/solr/">Solr</a>.</p>
+
+<a name="sig"><h2>Signatures and hashes</h2></a>
+
+<p>All official source and binary releases are digitally signed using GnuPG.
+    You are encouraged to verify that your download is the official one by verifying
+    the digital signature. To do this you need, in addition to the downloaded file:
+</p>
+
+<ul>
+    <li>the pgp or gpg software</li>
+    <li>the official <samp><em>KEYS</em></samp> file for the project</li>
+    <li>the <samp><em>file</em>.asc</samp> file corresponding to your download</li>
+</ul>
+
+<p><b>Always download the <em>KEYS</em> and <em>.asc</em> files directly from the Apache site at
+    &lt;<a href="https://www.apache.org/dist/lucene/solr/"><samp>https://www.apache.org/dist/lucene/solr/</samp></a>&gt;,
+    and always over HTTPS. Never trust KEYS from a mirror site. <a href="https://www.apache.org/info/verification.html">Read more</a></b></p>
+
+<pre>Always test available signatures, <i>e.g.</i>,
+$ pgpk -a KEYS
+$ pgpk solr-x.y.z.tar.gz.asc
+or,
+$ pgp -ka KEYS
+$ pgp solr-x.y.z.tar.gz.asc
+or,
+$ gpg --import KEYS
+$ gpg --verify solr-x.y.z.tar.gz.asc
+</pre>
+
+<h3>Checking the hashes</h3>
+<p>
+    Alongside the release artifacts in the official Apache dist site you will also find other
+    files providing checksum hashes for each file, with suffix .sha1, .sha512 or .md5. 
+    E.g. for <samp>solr-x.y.z.tgz</samp> the <samp>solr-x.y.z.tgz.sha1</samp> file provides
+    the SHA-1 checksum. These are useful to verify that your download was complete and valid, 
+    but will not prove that your download was digitally signed by an actual Apache committer. 
+    For that you must check the .asc signature.
+</p>
+
+<pre>Calculate the checksum of your download and compare to the contents of the checksum files
+$ shasum [-a 512] solr-x.y.z.tgz
+$ md5 solr-x.y.z.tgz
+</pre>
 
+<a name="archive"><h2>Older Versions</h2></a>
+<p>
+Older versions of Solr can be found on <a
+href="http://archive.apache.org/dist/lucene/solr/">archive.apache.org</a>.
+</p>
+<!-- $HeadURL: http://svn.apache.org/repos/asf/lucene/java/dist/README.html $ -->
+<!-- $Id: README.html 714097 2008-11-14 18:44:49Z hossman $ -->