You are viewing a plain text version of this content. The canonical link for it is here.
Posted to general@portals.apache.org by at...@apache.org on 2010/04/21 02:33:22 UTC
svn commit: r936123 - /portals/site/applications/src/site/xdoc/download.xml
Author: ate
Date: Wed Apr 21 00:33:21 2010
New Revision: 936123
URL: http://svn.apache.org/viewvc?rev=936123&view=rev
Log:
APA-40: Download page does not have link to KEYS file
Modified:
portals/site/applications/src/site/xdoc/download.xml
Modified: portals/site/applications/src/site/xdoc/download.xml
URL: http://svn.apache.org/viewvc/portals/site/applications/src/site/xdoc/download.xml?rev=936123&r1=936122&r2=936123&view=diff
==============================================================================
--- portals/site/applications/src/site/xdoc/download.xml (original)
+++ portals/site/applications/src/site/xdoc/download.xml Wed Apr 21 00:33:21 2010
@@ -43,25 +43,25 @@
</tr>
<tr>
<td>Database Browser 1.1 Portlet Application</td>
- <td><a href="http://www.apache.org/dyn/closer.cgi/portals/applications/binaries/apa-dbbrowser-war-1.1.war"></a>apa-dbbrowser-war-1.1.war</td>
+ <td><a href="http://www.apache.org/dyn/closer.cgi/portals/applications/binaries/apa-dbbrowser-war-1.1.war">apa-dbbrowser-war-1.1.war</a></td>
<td><a href="http://www.apache.org/dist/portals/applications/binaries/apa-dbbrowser-war-1.1.war.md5">here</a></td>
<td><a href="http://www.apache.org/dist/portals/applications/binaries/apa-dbbrowser-war-1.1.war.asc">here</a></td>
</tr>
<tr>
<td>Portlet Programming Demo 1.1 Portlet Application</td>
- <td><a href="http://www.apache.org/dyn/closer.cgi/portals/applications/binaries/apa-demo-1.1.war"></a>apa-demo-1.1.war</td>
+ <td><a href="http://www.apache.org/dyn/closer.cgi/portals/applications/binaries/apa-demo-1.1.war">apa-demo-1.1.war</a></td>
<td><a href="http://www.apache.org/dist/portals/applications/binaries/apa-demo-1.1.war.md5">here</a></td>
<td><a href="http://www.apache.org/dist/portals/applications/binaries/apa-demo-1.1.war.asc">here</a></td>
</tr>
<tr>
<td>RSS 1.1 Portlet Application</td>
- <td><a href="http://www.apache.org/dyn/closer.cgi/portals/applications/binaries/apa-rss-war-1.1.war"></a>apa-rss-war-1.1.war</td>
+ <td><a href="http://www.apache.org/dyn/closer.cgi/portals/applications/binaries/apa-rss-war-1.1.war">apa-rss-war-1.1.war</a></td>
<td><a href="http://www.apache.org/dist/portals/applications/binaries/apa-rss-war-1.1.war.md5">here</a></td>
<td><a href="http://www.apache.org/dist/portals/applications/binaries/apa-rss-war-1.1.war.asc">here</a></td>
</tr>
<tr>
<td>Web Content 1.1 Portlet Application</td>
- <td><a href="http://www.apache.org/dyn/closer.cgi/portals/applications/binaries/apa-webcontent-war-1.1.war"></a>apa-webcontent-war-1.1.war</td>
+ <td><a href="http://www.apache.org/dyn/closer.cgi/portals/applications/binaries/apa-webcontent-war-1.1.war">apa-webcontent-war-1.1.war</a></td>
<td><a href="http://www.apache.org/dist/portals/applications/binaries/apa-webcontent-war-1.1.war.md5">here</a></td>
<td><a href="http://www.apache.org/dist/portals/applications/binaries/apa-webcontent-war-1.1.war.asc">here</a></td>
</tr>
@@ -115,6 +115,33 @@
</table>
</subsection>
+ <subsection name="Verify the integrity of the files">
+ <p>
+ It is essential that you verify the integrity of the downloaded files using the PGP or MD5 signatures.
+ Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a>
+ for more information on why you should verify our releases.
+ </p>
+ <p>
+ The PGP signatures can be verified using PGP or GPG.
+ First download these <a href="http://www.apache.org/dist/portals/applications/KEYS">KEYS</a> as well as the asc signature file for the relevant distribution.
+ Make sure you get these files from the main distribution site, rather than from a mirror.
+ Then verify the signatures using
+ <source><![CDATA[ % pgpk -a KEYS
+ % pgpv downloaded_file.asc
+or
+ % pgp -ka KEYS
+ % pgp downloaded_file.asc
+or
+ % gpg --import KEYS
+ % gpg --verify downloaded_file.asc]]></source>
+ </p>
+ <p>
+ Alternatively, you can verify the MD5 signature on the files. A unix program called md5 or md5sum is included in many unix distributions.
+ It is also available as part of <a href="http://www.gnu.org/software/textutils/textutils.html">GNU Textutils</a>.
+ Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>,
+ <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or <a href="http://www.slavasoft.com/fsum/">here</a>.
+ </p>
+ </subsection>
</section>