svn commit: r1393016 - /mrunit/site/trunk/content/general/downloads.mdtext

[br...@apache.org]

Author: brock
Date: Tue Oct  2 16:33:44 2012
New Revision: 1393016

URL: http://svn.apache.org/viewvc?rev=1393016&view=rev
Log:
MRUNIT-130: Download page does not point to KEYS; no hashes in download area; must not advertise snapshot builds

Modified:
    mrunit/site/trunk/content/general/downloads.mdtext

Modified: mrunit/site/trunk/content/general/downloads.mdtext
URL: http://svn.apache.org/viewvc/mrunit/site/trunk/content/general/downloads.mdtext?rev=1393016&r1=1393015&r2=1393016&view=diff
==============================================================================
--- mrunit/site/trunk/content/general/downloads.mdtext (original)
+++ mrunit/site/trunk/content/general/downloads.mdtext Tue Oct  2 16:33:44 2012
@@ -14,9 +14,28 @@ earlier) are available through the [Apac
 
 The Maven coordinates are groupId: org.apache.mrunit and artifactId: mrunit.
 
+## Verify
+
+It is essential that you verify the integrity of the downloaded files using the PGP signatures. Please 
+read [Verifying Apache HTTP Server Releases][] for more information on why you should verify our releases.
+
+The PGP signatures can be verified using PGP or GPG. First download the KEYS file as well as the .asc 
+signature files for the relevant release packages. Make sure you get these files from the main 
+distribution directory, rather than from a mirror. Then verify the signatures using
+
+    % pgpk -a KEYS
+    % pgpv apache-mrunit-X.Y.Z.tar.gz.asc
+or
+    % pgp -ka KEYS
+    % pgp apache-mrunit-X.Y.Z.tar.gz.asc
+or
+    % gpg --import KEYS
+    % gpg --verify apache-mrunit-X.Y.Z.tar.gz.asc
+
 [Apache mirrors]: http://www.apache.org/dyn/closer.cgi/mrunit
 [Apache archives]: http://archive.apache.org/dist/mrunit/
 [Apache Incubator archives]: http://archive.apache.org/dist/incubator/mrunit/
+[Verifying Apache HTTP Server Releases]: http://httpd.apache.org/dev/verification.html
 
 [0.9.0-src]: http://www.apache.org/dyn/closer.cgi/mrunit/mrunit-0.9.0-incubating/mrunit-0.9.0-incubating-src.tar.gz
 [0.9.0-src-pgp]: http://www.apache.org/dyn/closer.cgi/mrunit/mrunit-0.9.0-incubating/mrunit-0.9.0-incubating-src.tar.gz.asc