You are viewing a plain text version of this content. The canonical link for it is here.
Posted to site-cvs@jakarta.apache.org by se...@apache.org on 2008/07/01 17:57:23 UTC
svn commit: r673111 - in /jakarta/site: docs/site/downloads/ xdocs/downloads/
Author: sebb
Date: Tue Jul 1 08:57:22 2008
New Revision: 673111
URL: http://svn.apache.org/viewvc?rev=673111&view=rev
Log:
Add download verification details
Modified:
jakarta/site/docs/site/downloads/downloads_bcel.html
jakarta/site/docs/site/downloads/downloads_bsf.html
jakarta/site/docs/site/downloads/downloads_cactus.html
jakarta/site/docs/site/downloads/downloads_ecs.html
jakarta/site/docs/site/downloads/downloads_jcs.html
jakarta/site/docs/site/downloads/downloads_jmeter.html
jakarta/site/docs/site/downloads/downloads_oro.html
jakarta/site/docs/site/downloads/downloads_regexp.html
jakarta/site/docs/site/downloads/downloads_taglibs-application.html
jakarta/site/docs/site/downloads/downloads_taglibs-benchmark.html
jakarta/site/docs/site/downloads/downloads_taglibs-datetime.html
jakarta/site/docs/site/downloads/downloads_taglibs-dbtags.html
jakarta/site/docs/site/downloads/downloads_taglibs-log.html
jakarta/site/docs/site/downloads/downloads_taglibs-mailer.html
jakarta/site/docs/site/downloads/downloads_taglibs-page.html
jakarta/site/docs/site/downloads/downloads_taglibs-random.html
jakarta/site/docs/site/downloads/downloads_taglibs-rdc.html
jakarta/site/docs/site/downloads/downloads_taglibs-regexp.html
jakarta/site/docs/site/downloads/downloads_taglibs-request.html
jakarta/site/docs/site/downloads/downloads_taglibs-response.html
jakarta/site/docs/site/downloads/downloads_taglibs-session.html
jakarta/site/docs/site/downloads/downloads_taglibs-standard-1.0.html
jakarta/site/docs/site/downloads/downloads_taglibs-standard.html
jakarta/site/docs/site/downloads/downloads_taglibs-string.html
jakarta/site/docs/site/downloads/downloads_taglibs-xsl.html
jakarta/site/docs/site/downloads/downloads_taglibs.html
jakarta/site/xdocs/downloads/download-pages.xsl
Modified: jakarta/site/docs/site/downloads/downloads_bcel.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_bcel.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_bcel.html (original)
+++ jakarta/site/docs/site/downloads/downloads_bcel.html Tue Jul 1 08:57:22 2008
@@ -251,6 +251,40 @@
<a href="http://archive.apache.org/dist/jakarta/bcel/">archives...</a>
</li>
</ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+ files using the PGP or MD5 signatures. Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+ more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG. First
+ download the <code>KEYS</code>
+ as well as the <code>asc</code> signature file for the relevant
+ distribution.
+ Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+ using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files. A
+ unix program called <code>md5</code> or <code>md5sum</code> is
+ included in many unix distributions. It is also available as part of
+ <a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+ Textutils</a>. Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+ <a href="http://www.slavasoft.com/fsum/">here</a>.</p>
</div>
</p>
</div>
Modified: jakarta/site/docs/site/downloads/downloads_bsf.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_bsf.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_bsf.html (original)
+++ jakarta/site/docs/site/downloads/downloads_bsf.html Tue Jul 1 08:57:22 2008
@@ -287,6 +287,40 @@
<a href="http://archive.apache.org/dist/jakarta/bsf/">archives...</a>
</li>
</ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+ files using the PGP or MD5 signatures. Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+ more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG. First
+ download the <code>KEYS</code>
+ as well as the <code>asc</code> signature file for the relevant
+ distribution.
+ Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+ using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files. A
+ unix program called <code>md5</code> or <code>md5sum</code> is
+ included in many unix distributions. It is also available as part of
+ <a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+ Textutils</a>. Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+ <a href="http://www.slavasoft.com/fsum/">here</a>.</p>
</div>
</p>
</div>
Modified: jakarta/site/docs/site/downloads/downloads_cactus.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_cactus.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_cactus.html (original)
+++ jakarta/site/docs/site/downloads/downloads_cactus.html Tue Jul 1 08:57:22 2008
@@ -267,6 +267,40 @@
<a href="http://archive.apache.org/dist/jakarta/cactus/">archives...</a>
</li>
</ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+ files using the PGP or MD5 signatures. Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+ more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG. First
+ download the <code>KEYS</code>
+ as well as the <code>asc</code> signature file for the relevant
+ distribution.
+ Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+ using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files. A
+ unix program called <code>md5</code> or <code>md5sum</code> is
+ included in many unix distributions. It is also available as part of
+ <a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+ Textutils</a>. Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+ <a href="http://www.slavasoft.com/fsum/">here</a>.</p>
</div>
</p>
</div>
Modified: jakarta/site/docs/site/downloads/downloads_ecs.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_ecs.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_ecs.html (original)
+++ jakarta/site/docs/site/downloads/downloads_ecs.html Tue Jul 1 08:57:22 2008
@@ -251,6 +251,40 @@
<a href="http://archive.apache.org/dist/jakarta/ecs/">archives...</a>
</li>
</ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+ files using the PGP or MD5 signatures. Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+ more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG. First
+ download the <code>KEYS</code>
+ as well as the <code>asc</code> signature file for the relevant
+ distribution.
+ Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+ using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files. A
+ unix program called <code>md5</code> or <code>md5sum</code> is
+ included in many unix distributions. It is also available as part of
+ <a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+ Textutils</a>. Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+ <a href="http://www.slavasoft.com/fsum/">here</a>.</p>
</div>
</p>
</div>
Modified: jakarta/site/docs/site/downloads/downloads_jcs.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_jcs.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_jcs.html (original)
+++ jakarta/site/docs/site/downloads/downloads_jcs.html Tue Jul 1 08:57:22 2008
@@ -245,6 +245,40 @@
</ul>
</li>
</ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+ files using the PGP or MD5 signatures. Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+ more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG. First
+ download the <code>KEYS</code>
+ as well as the <code>asc</code> signature file for the relevant
+ distribution.
+ Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+ using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files. A
+ unix program called <code>md5</code> or <code>md5sum</code> is
+ included in many unix distributions. It is also available as part of
+ <a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+ Textutils</a>. Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+ <a href="http://www.slavasoft.com/fsum/">here</a>.</p>
</div>
</p>
</div>
Modified: jakarta/site/docs/site/downloads/downloads_jmeter.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_jmeter.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_jmeter.html (original)
+++ jakarta/site/docs/site/downloads/downloads_jmeter.html Tue Jul 1 08:57:22 2008
@@ -251,6 +251,40 @@
<a href="http://archive.apache.org/dist/jakarta/jmeter/">archives...</a>
</li>
</ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+ files using the PGP or MD5 signatures. Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+ more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG. First
+ download the <code>KEYS</code>
+ as well as the <code>asc</code> signature file for the relevant
+ distribution.
+ Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+ using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files. A
+ unix program called <code>md5</code> or <code>md5sum</code> is
+ included in many unix distributions. It is also available as part of
+ <a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+ Textutils</a>. Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+ <a href="http://www.slavasoft.com/fsum/">here</a>.</p>
</div>
</p>
</div>
Modified: jakarta/site/docs/site/downloads/downloads_oro.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_oro.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_oro.html (original)
+++ jakarta/site/docs/site/downloads/downloads_oro.html Tue Jul 1 08:57:22 2008
@@ -251,6 +251,40 @@
<a href="http://archive.apache.org/dist/jakarta/oro/">archives...</a>
</li>
</ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+ files using the PGP or MD5 signatures. Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+ more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG. First
+ download the <code>KEYS</code>
+ as well as the <code>asc</code> signature file for the relevant
+ distribution.
+ Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+ using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files. A
+ unix program called <code>md5</code> or <code>md5sum</code> is
+ included in many unix distributions. It is also available as part of
+ <a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+ Textutils</a>. Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+ <a href="http://www.slavasoft.com/fsum/">here</a>.</p>
</div>
</p>
</div>
Modified: jakarta/site/docs/site/downloads/downloads_regexp.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_regexp.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_regexp.html (original)
+++ jakarta/site/docs/site/downloads/downloads_regexp.html Tue Jul 1 08:57:22 2008
@@ -226,6 +226,40 @@
<a href="http://archive.apache.org/dist/jakarta/regexp/">archives...</a>
</li>
</ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+ files using the PGP or MD5 signatures. Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+ more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG. First
+ download the <code>KEYS</code>
+ as well as the <code>asc</code> signature file for the relevant
+ distribution.
+ Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+ using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files. A
+ unix program called <code>md5</code> or <code>md5sum</code> is
+ included in many unix distributions. It is also available as part of
+ <a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+ Textutils</a>. Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+ <a href="http://www.slavasoft.com/fsum/">here</a>.</p>
</div>
</p>
</div>
Modified: jakarta/site/docs/site/downloads/downloads_taglibs-application.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-application.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-application.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-application.html Tue Jul 1 08:57:22 2008
@@ -212,6 +212,40 @@
<a href="http://archive.apache.org/dist/jakarta/taglibs/application/">archives...</a>
</li>
</ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+ files using the PGP or MD5 signatures. Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+ more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG. First
+ download the <code>KEYS</code>
+ as well as the <code>asc</code> signature file for the relevant
+ distribution.
+ Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+ using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files. A
+ unix program called <code>md5</code> or <code>md5sum</code> is
+ included in many unix distributions. It is also available as part of
+ <a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+ Textutils</a>. Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+ <a href="http://www.slavasoft.com/fsum/">here</a>.</p>
</div>
</p>
</div>
Modified: jakarta/site/docs/site/downloads/downloads_taglibs-benchmark.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-benchmark.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-benchmark.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-benchmark.html Tue Jul 1 08:57:22 2008
@@ -212,6 +212,40 @@
<a href="http://archive.apache.org/dist/jakarta/taglibs/benchmark/">archives...</a>
</li>
</ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+ files using the PGP or MD5 signatures. Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+ more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG. First
+ download the <code>KEYS</code>
+ as well as the <code>asc</code> signature file for the relevant
+ distribution.
+ Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+ using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files. A
+ unix program called <code>md5</code> or <code>md5sum</code> is
+ included in many unix distributions. It is also available as part of
+ <a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+ Textutils</a>. Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+ <a href="http://www.slavasoft.com/fsum/">here</a>.</p>
</div>
</p>
</div>
Modified: jakarta/site/docs/site/downloads/downloads_taglibs-datetime.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-datetime.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-datetime.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-datetime.html Tue Jul 1 08:57:22 2008
@@ -212,6 +212,40 @@
<a href="http://archive.apache.org/dist/jakarta/taglibs/datetime/">archives...</a>
</li>
</ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+ files using the PGP or MD5 signatures. Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+ more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG. First
+ download the <code>KEYS</code>
+ as well as the <code>asc</code> signature file for the relevant
+ distribution.
+ Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+ using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files. A
+ unix program called <code>md5</code> or <code>md5sum</code> is
+ included in many unix distributions. It is also available as part of
+ <a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+ Textutils</a>. Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+ <a href="http://www.slavasoft.com/fsum/">here</a>.</p>
</div>
</p>
</div>
Modified: jakarta/site/docs/site/downloads/downloads_taglibs-dbtags.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-dbtags.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-dbtags.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-dbtags.html Tue Jul 1 08:57:22 2008
@@ -212,6 +212,40 @@
<a href="http://archive.apache.org/dist/jakarta/taglibs/dbtags/">archives...</a>
</li>
</ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+ files using the PGP or MD5 signatures. Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+ more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG. First
+ download the <code>KEYS</code>
+ as well as the <code>asc</code> signature file for the relevant
+ distribution.
+ Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+ using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files. A
+ unix program called <code>md5</code> or <code>md5sum</code> is
+ included in many unix distributions. It is also available as part of
+ <a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+ Textutils</a>. Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+ <a href="http://www.slavasoft.com/fsum/">here</a>.</p>
</div>
</p>
</div>
Modified: jakarta/site/docs/site/downloads/downloads_taglibs-log.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-log.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-log.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-log.html Tue Jul 1 08:57:22 2008
@@ -212,6 +212,40 @@
<a href="http://archive.apache.org/dist/jakarta/taglibs/log/">archives...</a>
</li>
</ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+ files using the PGP or MD5 signatures. Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+ more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG. First
+ download the <code>KEYS</code>
+ as well as the <code>asc</code> signature file for the relevant
+ distribution.
+ Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+ using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files. A
+ unix program called <code>md5</code> or <code>md5sum</code> is
+ included in many unix distributions. It is also available as part of
+ <a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+ Textutils</a>. Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+ <a href="http://www.slavasoft.com/fsum/">here</a>.</p>
</div>
</p>
</div>
Modified: jakarta/site/docs/site/downloads/downloads_taglibs-mailer.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-mailer.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-mailer.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-mailer.html Tue Jul 1 08:57:22 2008
@@ -212,6 +212,40 @@
<a href="http://archive.apache.org/dist/jakarta/taglibs/mailer/">archives...</a>
</li>
</ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+ files using the PGP or MD5 signatures. Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+ more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG. First
+ download the <code>KEYS</code>
+ as well as the <code>asc</code> signature file for the relevant
+ distribution.
+ Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+ using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files. A
+ unix program called <code>md5</code> or <code>md5sum</code> is
+ included in many unix distributions. It is also available as part of
+ <a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+ Textutils</a>. Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+ <a href="http://www.slavasoft.com/fsum/">here</a>.</p>
</div>
</p>
</div>
Modified: jakarta/site/docs/site/downloads/downloads_taglibs-page.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-page.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-page.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-page.html Tue Jul 1 08:57:22 2008
@@ -212,6 +212,40 @@
<a href="http://archive.apache.org/dist/jakarta/taglibs/page/">archives...</a>
</li>
</ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+ files using the PGP or MD5 signatures. Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+ more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG. First
+ download the <code>KEYS</code>
+ as well as the <code>asc</code> signature file for the relevant
+ distribution.
+ Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+ using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files. A
+ unix program called <code>md5</code> or <code>md5sum</code> is
+ included in many unix distributions. It is also available as part of
+ <a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+ Textutils</a>. Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+ <a href="http://www.slavasoft.com/fsum/">here</a>.</p>
</div>
</p>
</div>
Modified: jakarta/site/docs/site/downloads/downloads_taglibs-random.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-random.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-random.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-random.html Tue Jul 1 08:57:22 2008
@@ -212,6 +212,40 @@
<a href="http://archive.apache.org/dist/jakarta/taglibs/random/">archives...</a>
</li>
</ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+ files using the PGP or MD5 signatures. Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+ more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG. First
+ download the <code>KEYS</code>
+ as well as the <code>asc</code> signature file for the relevant
+ distribution.
+ Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+ using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files. A
+ unix program called <code>md5</code> or <code>md5sum</code> is
+ included in many unix distributions. It is also available as part of
+ <a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+ Textutils</a>. Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+ <a href="http://www.slavasoft.com/fsum/">here</a>.</p>
</div>
</p>
</div>
Modified: jakarta/site/docs/site/downloads/downloads_taglibs-rdc.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-rdc.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-rdc.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-rdc.html Tue Jul 1 08:57:22 2008
@@ -246,6 +246,40 @@
<a href="http://archive.apache.org/dist/jakarta/taglibs/rdc/">archives...</a>
</li>
</ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+ files using the PGP or MD5 signatures. Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+ more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG. First
+ download the <code>KEYS</code>
+ as well as the <code>asc</code> signature file for the relevant
+ distribution.
+ Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+ using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files. A
+ unix program called <code>md5</code> or <code>md5sum</code> is
+ included in many unix distributions. It is also available as part of
+ <a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+ Textutils</a>. Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+ <a href="http://www.slavasoft.com/fsum/">here</a>.</p>
</div>
</p>
</div>
Modified: jakarta/site/docs/site/downloads/downloads_taglibs-regexp.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-regexp.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-regexp.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-regexp.html Tue Jul 1 08:57:22 2008
@@ -212,6 +212,40 @@
<a href="http://archive.apache.org/dist/jakarta/taglibs/regexp/">archives...</a>
</li>
</ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+ files using the PGP or MD5 signatures. Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+ more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG. First
+ download the <code>KEYS</code>
+ as well as the <code>asc</code> signature file for the relevant
+ distribution.
+ Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+ using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files. A
+ unix program called <code>md5</code> or <code>md5sum</code> is
+ included in many unix distributions. It is also available as part of
+ <a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+ Textutils</a>. Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+ <a href="http://www.slavasoft.com/fsum/">here</a>.</p>
</div>
</p>
</div>
Modified: jakarta/site/docs/site/downloads/downloads_taglibs-request.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-request.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-request.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-request.html Tue Jul 1 08:57:22 2008
@@ -212,6 +212,40 @@
<a href="http://archive.apache.org/dist/jakarta/taglibs/request/">archives...</a>
</li>
</ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+ files using the PGP or MD5 signatures. Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+ more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG. First
+ download the <code>KEYS</code>
+ as well as the <code>asc</code> signature file for the relevant
+ distribution.
+ Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+ using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files. A
+ unix program called <code>md5</code> or <code>md5sum</code> is
+ included in many unix distributions. It is also available as part of
+ <a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+ Textutils</a>. Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+ <a href="http://www.slavasoft.com/fsum/">here</a>.</p>
</div>
</p>
</div>
Modified: jakarta/site/docs/site/downloads/downloads_taglibs-response.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-response.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-response.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-response.html Tue Jul 1 08:57:22 2008
@@ -212,6 +212,40 @@
<a href="http://archive.apache.org/dist/jakarta/taglibs/response/">archives...</a>
</li>
</ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+ files using the PGP or MD5 signatures. Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+ more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG. First
+ download the <code>KEYS</code>
+ as well as the <code>asc</code> signature file for the relevant
+ distribution.
+ Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+ using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files. A
+ unix program called <code>md5</code> or <code>md5sum</code> is
+ included in many unix distributions. It is also available as part of
+ <a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+ Textutils</a>. Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+ <a href="http://www.slavasoft.com/fsum/">here</a>.</p>
</div>
</p>
</div>
Modified: jakarta/site/docs/site/downloads/downloads_taglibs-session.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-session.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-session.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-session.html Tue Jul 1 08:57:22 2008
@@ -212,6 +212,40 @@
<a href="http://archive.apache.org/dist/jakarta/taglibs/session/">archives...</a>
</li>
</ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+ files using the PGP or MD5 signatures. Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+ more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG. First
+ download the <code>KEYS</code>
+ as well as the <code>asc</code> signature file for the relevant
+ distribution.
+ Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+ using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files. A
+ unix program called <code>md5</code> or <code>md5sum</code> is
+ included in many unix distributions. It is also available as part of
+ <a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+ Textutils</a>. Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+ <a href="http://www.slavasoft.com/fsum/">here</a>.</p>
</div>
</p>
</div>
Modified: jakarta/site/docs/site/downloads/downloads_taglibs-standard-1.0.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-standard-1.0.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-standard-1.0.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-standard-1.0.html Tue Jul 1 08:57:22 2008
@@ -258,6 +258,40 @@
<a href="http://archive.apache.org/dist/jakarta/taglibs/standard-1.0/">archives...</a>
</li>
</ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+ files using the PGP or MD5 signatures. Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+ more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG. First
+ download the <code>KEYS</code>
+ as well as the <code>asc</code> signature file for the relevant
+ distribution.
+ Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+ using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files. A
+ unix program called <code>md5</code> or <code>md5sum</code> is
+ included in many unix distributions. It is also available as part of
+ <a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+ Textutils</a>. Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+ <a href="http://www.slavasoft.com/fsum/">here</a>.</p>
</div>
</p>
</div>
Modified: jakarta/site/docs/site/downloads/downloads_taglibs-standard.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-standard.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-standard.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-standard.html Tue Jul 1 08:57:22 2008
@@ -242,6 +242,40 @@
<a href="http://archive.apache.org/dist/jakarta/taglibs/standard/">archives...</a>
</li>
</ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+ files using the PGP or MD5 signatures. Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+ more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG. First
+ download the <code>KEYS</code>
+ as well as the <code>asc</code> signature file for the relevant
+ distribution.
+ Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+ using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files. A
+ unix program called <code>md5</code> or <code>md5sum</code> is
+ included in many unix distributions. It is also available as part of
+ <a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+ Textutils</a>. Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+ <a href="http://www.slavasoft.com/fsum/">here</a>.</p>
</div>
</p>
</div>
Modified: jakarta/site/docs/site/downloads/downloads_taglibs-string.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-string.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-string.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-string.html Tue Jul 1 08:57:22 2008
@@ -212,6 +212,40 @@
<a href="http://archive.apache.org/dist/jakarta/taglibs/string/">archives...</a>
</li>
</ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+ files using the PGP or MD5 signatures. Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+ more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG. First
+ download the <code>KEYS</code>
+ as well as the <code>asc</code> signature file for the relevant
+ distribution.
+ Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+ using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files. A
+ unix program called <code>md5</code> or <code>md5sum</code> is
+ included in many unix distributions. It is also available as part of
+ <a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+ Textutils</a>. Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+ <a href="http://www.slavasoft.com/fsum/">here</a>.</p>
</div>
</p>
</div>
Modified: jakarta/site/docs/site/downloads/downloads_taglibs-xsl.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-xsl.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-xsl.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-xsl.html Tue Jul 1 08:57:22 2008
@@ -212,6 +212,40 @@
<a href="http://archive.apache.org/dist/jakarta/taglibs/xsl/">archives...</a>
</li>
</ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+ files using the PGP or MD5 signatures. Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+ more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG. First
+ download the <code>KEYS</code>
+ as well as the <code>asc</code> signature file for the relevant
+ distribution.
+ Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+ using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files. A
+ unix program called <code>md5</code> or <code>md5sum</code> is
+ included in many unix distributions. It is also available as part of
+ <a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+ Textutils</a>. Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+ <a href="http://www.slavasoft.com/fsum/">here</a>.</p>
</div>
</p>
</div>
Modified: jakarta/site/docs/site/downloads/downloads_taglibs.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs.html Tue Jul 1 08:57:22 2008
@@ -209,6 +209,40 @@
<a href="downloads_taglibs-xsl.cgi">XSL Taglib</a>
</li>
</ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+ files using the PGP or MD5 signatures. Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+ more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG. First
+ download the <code>KEYS</code>
+ as well as the <code>asc</code> signature file for the relevant
+ distribution.
+ Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+ using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files. A
+ unix program called <code>md5</code> or <code>md5sum</code> is
+ included in many unix distributions. It is also available as part of
+ <a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+ Textutils</a>. Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+ <a href="http://www.slavasoft.com/fsum/">here</a>.</p>
</div>
</p>
</div>
Modified: jakarta/site/xdocs/downloads/download-pages.xsl
URL: http://svn.apache.org/viewvc/jakarta/site/xdocs/downloads/download-pages.xsl?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/xdocs/downloads/download-pages.xsl (original)
+++ jakarta/site/xdocs/downloads/download-pages.xsl Tue Jul 1 08:57:22 2008
@@ -69,7 +69,7 @@
<xsl:attribute name="value"><xsl:value-of select="'Change'"/></xsl:attribute>
</input>
</form>
- </p>
+ </p>
</xsl:if>
<p>
@@ -100,6 +100,42 @@
</ul>
</xsl:if>
<xsl:apply-templates select="downloads"/>
+ <h3>Verification of downloads</h3>
+ <p>It is essential that you verify the integrity of the downloaded
+ files using the PGP or MD5 signatures. Please read <a
+ href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+ more information on why you should verify our releases.</p>
+
+ <p>The PGP signatures can be verified using PGP or GPG. First
+ download the <code>KEYS</code>
+ as well as the <code>asc</code> signature file for the relevant
+ distribution.
+ Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+ using</p>
+
+<p><code>
+% pgpk -a KEYS<br />
+% pgpv downloaded_file.asc<br />
+</code>
+<em>or</em><br />
+<code>
+% pgp -ka KEYS<br />
+% pgp downloaded_file.asc<br />
+</code>
+<em>or</em><br />
+<code>
+% gpg --import KEYS<br />
+% gpg --verify downloaded_file.asc
+</code></p>
+
+ <p>Alternatively, you can verify the MD5 signature on the files. A
+ unix program called <code>md5</code> or <code>md5sum</code> is
+ included in many unix distributions. It is also available as part of
+ <a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+ Textutils</a>. Windows users can get binary md5 programs from <a
+ href="http://www.fourmilab.ch/md5/">here</a>, <a
+ href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+ <a href="http://www.slavasoft.com/fsum/">here</a>.</p>
</section>
</body>
</document>
---------------------------------------------------------------------
To unsubscribe, e-mail: site-cvs-unsubscribe@jakarta.apache.org
For additional commands, e-mail: site-cvs-help@jakarta.apache.org