svn commit: r889855 - /continuum/site/src/site/apt/download.apt

[ws...@apache.org]

Author: wsmoak
Date: Fri Dec 11 23:25:36 2009
New Revision: 889855

URL: http://svn.apache.org/viewvc?rev=889855&view=rev
Log:
[CONTINUUM-2421] Add link to KEYS file and information on verifying signatures and checksums.  Adapted from Apache Struts download page.

Modified:
    continuum/site/src/site/apt/download.apt

Modified: continuum/site/src/site/apt/download.apt
URL: http://svn.apache.org/viewvc/continuum/site/src/site/apt/download.apt?rev=889855&r1=889854&r2=889855&view=diff
==============================================================================
--- continuum/site/src/site/apt/download.apt (original)
+++ continuum/site/src/site/apt/download.apt Fri Dec 11 23:25:36 2009
@@ -67,3 +67,34 @@
 
   More releases are available in the {{{http://archive.apache.org/dist/continuum/binaries/} Apache Continuum Archives}}
   or prior to the graduation from Maven, in the {{{http://archive.apache.org/dist/maven/binaries/} Apache Maven Archives}}.
+
+*Verify the integrity of the files
+
+ We recommend that you verify the integrity of the downloaded files using the PGP signatures and MD5 checksums.
+
+ The PGP signatures can be verified using PGP or GPG. First download the {{{http://www.apache.org/dist/continuum/KEYS}KEYS}}
+ as well as the asc signature file for the particular distribution. Make sure you get these files from
+ {{{http://www.apache.org/dist/continuum}the main distribution directory}},
+ rather than from a mirror. Then verify the signatures using
+
+
+ % pgpk -a KEYS
+
+ % pgpv ${filename}.tar.gz.asc
+
+ or
+
+ % pgp -ka KEYS
+
+ % pgp ${filename}.tar.gz.asc
+
+ or
+
+ % gpg --import KEYS
+
+ % gpg --verify ${filename}.tar.gz.asc
+
+ You can also verify the MD5 signature on the files. A Unix program called md5 or md5sum is included in many
+ Unix distributions. It is also available as part of {{{http://www.gnu.org/software/coreutils/}GNU Coreutils}}.
+ Windows users can get binary md5 programs from {{{http://www.fourmilab.ch/md5/}Fourmilab}}, 
+ {{{http://www.pc-tools.net/win32/freeware/console}PC-Tools}} or {{{http://www.slavasoft.com/fsum/}SlavaSoft}}.