[users@httpd] Automated signature verification for Apache downloads

[Anthony Bryan <an...@gmail.com>]

Hi,

Metalink Checker (Python) now supports automated signature
verification for downloads with .metalink files.

.metalink files are XML and list mirrors, checksums, signatures, and
other information that is used for improving downloads and automating
advanced features. There are about 20 metalink download clients, from
CLI to GUI, on all platforms, from download managers to Web browsers.

Currently, only the cURL project includes signatures in their
.metalinks and only Metalink Checker supports verifying them. Many
other projects use .metalinks for their downloads.

To try it out, download Metalink Checker [1]. You need gnupg or
gpg4win installed for signature verification.

If you haven't already imported it, import the Apache key.

At the command line type:
python metalink.py -d -f
http://www.metalinker.org/samples/httpd-2.2.8.tar.gz.metalink

You'll then see:

Downloading to httpd-2.2.8.tar.gz
[###################################################----] 94% 5.50/5.84 MB
-----BEGIN PGP SIGNATURE INFORMATION-----
timestamp: Thu, 10 Jan 2008 11:54:57 (Eastern Standard Time)
fingerprint: 8B39757B1D8A994DF2433ED58B3A601F08C975E5
uid: Jim Jagielski <ji...@apache.org>
-----END PGP SIGNATURE INFORMATION-----

[#######################################################] 100% 5.84/5.84 MB

Any comments/suggestions?

More metalink info at http://en.wikipedia.org/wiki/Metalink

--
(( Anthony Bryan ... Metalink [ http://www.metalinker.org ]
 )) Easier, More Reliable, Self Healing Downloads

[1] http://metamirrors.nl/metalinks_project

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org