[jira] [Commented] (BEAM-3717) Problems with download page

["Sebb (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/BEAM-3717?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16638026#comment-16638026 ] 

Sebb commented on BEAM-3717:
----------------------------

Also the host dist.apache.org is not intended for public use.
It is only intended for use in pushing the release to the ASF mirror system.

KEYS, sigs and hashes must use links to
https://www.apache.org/dist/beam/...

The source artifact must be linked using the ASF mirror system, e.g.

https://www.apache.org/dyn/closer.lua/beam/2.7.0/apache-beam-2.7.0-source-release.zip


> Problems with download page
> ---------------------------
>
>                 Key: BEAM-3717
>                 URL: https://issues.apache.org/jira/browse/BEAM-3717
>             Project: Beam
>          Issue Type: Bug
>          Components: website
>            Reporter: Sebb
>            Assignee: Melissa Pashniak
>            Priority: Major
>
> The download page has some problems:
> 1) Links to previous releases are broken.
> These should either be removed, or be converted to use the archive server, e.g. instead of
> https://www.apache.org/dyn/closer.cgi?filename=beam/2.2.0/apache-beam-2.2.0-source-release.zip&action=download
> use
> https://archive.apache.org/dist/beam/2.2.0/apache-beam-2.2.0-source-release.zip
> 2) The download page must include links to the signature (.asc) file and hashes for all downloads.
> These must be linked from https://www.apache.org/dist/beam/... (or archive.apache.org for older releases)
> 3) There should be a link to the KEYS file at
> https://archive.apache.org/dist/beam/KEYS
> 4) There should be instructions on the need to verify downloads.
> See for example:
> https://tomcat.apache.org/download-70.cgi#Release_Integrity



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)