You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@jackrabbit.apache.org by "Julian Reschke (Jira)" <ji...@apache.org> on 2019/09/16 10:15:00 UTC
[jira] [Resolved] (JCR-4481) Download page gpg example needs second
parameter
[ https://issues.apache.org/jira/browse/JCR-4481?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Julian Reschke resolved JCR-4481.
---------------------------------
Resolution: Fixed
Done in r1866994
> Download page gpg example needs second parameter
> ------------------------------------------------
>
> Key: JCR-4481
> URL: https://issues.apache.org/jira/browse/JCR-4481
> Project: Jackrabbit Content Repository
> Issue Type: Bug
> Reporter: Sebb
> Assignee: Julian Reschke
> Priority: Major
>
> It is important that the file being checked is also specified [1] on the gpg command line [2]
> If the second paramater is omitted, gpg can report success without actually checking the main artifact. This should not happen on correctly constructed ASF downloads, as we only provide detached sigs, but we should not be documenting bad practise.
> [1] https://www.apache.org/info/verification.html#specify_both
> [2] https://tika.apache.org/download.html
--
This message was sent by Atlassian Jira
(v8.3.2#803003)