You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@chemistry.apache.org by fm...@apache.org on 2012/03/25 21:43:50 UTC
svn commit: r1305103 -
/chemistry/site/trunk/content/project/verification.mdtext
Author: fmui
Date: Sun Mar 25 19:43:50 2012
New Revision: 1305103
URL: http://svn.apache.org/viewvc?rev=1305103&view=rev
Log:
added verification page
Added:
chemistry/site/trunk/content/project/verification.mdtext (with props)
Added: chemistry/site/trunk/content/project/verification.mdtext
URL: http://svn.apache.org/viewvc/chemistry/site/trunk/content/project/verification.mdtext?rev=1305103&view=auto
==============================================================================
--- chemistry/site/trunk/content/project/verification.mdtext (added)
+++ chemistry/site/trunk/content/project/verification.mdtext Sun Mar 25 19:43:50 2012
@@ -0,0 +1,20 @@
+Title: Verify Release Packages
+Verify Release Packages
+------
+
+It is essential that you verify the integrity of the downloaded files using the PGP signatures. Please read [Verifying Apache HTTP Server Releases](http://httpd.apache.org/dev/verification.html) for more information on why you should verify our releases.
+
+The PGP signatures can be verified using PGP or GPG. First download the [KEYS](http://www.apache.org/dist/chemistry/KEYS) file as well as the .asc signature files for the relevant release packages. Make sure you get these files from the [main distribution directory](http://www.apache.org/dist/chemistry/), rather than from a mirror. Then verify the signatures using
+
+ % pgpk -a KEYS
+ % pgpv <file>.asc
+
+or
+
+ % pgp -ka KEYS
+ % pgp <file>.asc
+
+or
+
+ % gpg --import KEYS
+ % gpg --verify <file>.asc
Propchange: chemistry/site/trunk/content/project/verification.mdtext
------------------------------------------------------------------------------
svn:eol-style = native