You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@juneau.apache.org by ja...@apache.org on 2017/10/05 20:02:41 UTC
incubator-juneau-website git commit: Add instructions on how to
verify downloads.
Repository: incubator-juneau-website
Updated Branches:
refs/heads/asf-site 671126b63 -> 7e18a3865
Add instructions on how to verify downloads.
Project: http://git-wip-us.apache.org/repos/asf/incubator-juneau-website/repo
Commit: http://git-wip-us.apache.org/repos/asf/incubator-juneau-website/commit/7e18a386
Tree: http://git-wip-us.apache.org/repos/asf/incubator-juneau-website/tree/7e18a386
Diff: http://git-wip-us.apache.org/repos/asf/incubator-juneau-website/diff/7e18a386
Branch: refs/heads/asf-site
Commit: 7e18a3865fdc8a1314035f600c98dc1c5ac9d936
Parents: 671126b
Author: JamesBognar <ja...@apache.org>
Authored: Thu Oct 5 16:02:39 2017 -0400
Committer: JamesBognar <ja...@apache.org>
Committed: Thu Oct 5 16:02:39 2017 -0400
----------------------------------------------------------------------
content/downloads.html | 48 ++++++++++++++++++++++++++++++++++++++++++++-
1 file changed, 47 insertions(+), 1 deletion(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/incubator-juneau-website/blob/7e18a386/content/downloads.html
----------------------------------------------------------------------
diff --git a/content/downloads.html b/content/downloads.html
index 6f603fb..56a26c0 100644
--- a/content/downloads.html
+++ b/content/downloads.html
@@ -67,7 +67,7 @@
</ul>
</ul>
<li><b>Maven</b>
- <p class='bcode'>
+ <p class='bcode' style='max-width:800px;'>
<xc><!-- Use the following dependency... --></xc>
<xt><dependency></xt>
<xt><groupId></xt>org.apache.juneau<xt></groupId></xt>
@@ -88,6 +88,52 @@
<xt><artifactId></xt>juneau-microservice-server<xt></artifactId></xt>
</p>
</ul>
+
+ <h5 class='toc'>Verifying file integrity</h5>
+ <p>
+ It is essential that you verify the integrity of the downloaded files using the PGP or MD5 signatures.
+ </p>
+ <p>
+ The PGP signatures can be verified using PGP or GPG.
+ <br>First download the <a class='doclink' href='https://www.apache.org/dist/incubator/juneau/KEYS'>KEYS</a> as well
+ as the asc signature file for the relevant distribution.
+ <br>Make sure you get these files from the <a class='doclink' href='http://www.apache.org/dist/incubator/juneau'>main distribution directory</a> rather than from a mirror.
+ <br>Then verify the signatures using:
+ </p>
+ <p class='bcode' style='max-width:800px;'>
+ pgpk -a KEYS
+ pgpv apache-juneau-6.4.0-incubating-bin.zip.asc
+ </p>
+ <p>
+ ... or ...
+ </p>
+ <p class='bcode' style='max-width:800px;'>
+ pgp -ka KEYS
+ apache-juneau-6.4.0-incubating-bin.zip.asc
+ </p>
+ <p>
+ ... or ...
+ </p>
+ <p class='bcode' style='max-width:800px;'>
+ gpg --import KEYS
+ gpg --verify apache-juneau-6.4.0-incubating-bin.zip.asc apache-juneau-6.4.0-incubating-bin.zip
+ </p>
+ <p>
+ Alternatively, you can verify the MD5 signature on the files.
+ <br>A unix program called md5 or md5sum is included in many unix distributions.
+ It is also available as part of <a class='doclink' href='http://www.gnu.org/software/textutils/textutils.html'>GNU Textutils</a>.
+ <br>Windows users can get binary md5 programs from any of the following:
+ </p>
+ <ul>
+ <li><a class='doclink' href='http://www.fourmilab.ch/md5/'>MD5 Command Line Message Digest Utility</a>
+ <li><a class='doclink' href='http://www.pc-tools.net/win32/freeware/console/'>PC-Tools MD5SUMS</a>
+ <li><a class='doclink' href='http://www.slavasoft.com/fsum/'>SlavaSoft FSUM</a>
+ </ul>
+ <p>
+ An MD5 signature consists of 32 hex characters, and a SHA1 signature consists of 40 hex characters.
+ <br>Ensure your generated signature string matches the signature string published in the files above.
+ </p>
+
<h5 class='toc'>Older releases</h5>
<p class='download'>
6.3.1 (Aug 2, 2017)