You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@sentry.apache.org by co...@apache.org on 2016/09/08 09:05:36 UTC

svn commit: r1759768 - /sentry/site/trunk/content/general/downloads.mdtext

Author: coheigea
Date: Thu Sep  8 09:05:36 2016
New Revision: 1759768

URL: http://svn.apache.org/viewvc?rev=1759768&view=rev
Log:
SENTRY-1460 - Adding in links to KEYS, digests etc.

Modified:
    sentry/site/trunk/content/general/downloads.mdtext

Modified: sentry/site/trunk/content/general/downloads.mdtext
URL: http://svn.apache.org/viewvc/sentry/site/trunk/content/general/downloads.mdtext?rev=1759768&r1=1759767&r2=1759768&view=diff
==============================================================================
--- sentry/site/trunk/content/general/downloads.mdtext (original)
+++ sentry/site/trunk/content/general/downloads.mdtext Thu Sep  8 09:05:36 2016
@@ -1,27 +1,59 @@
 #Apache Sentry Releases
 
-Current release
+How to Download
 ---------------
-* [1.7.0][11] ([changelog][12])
 
-Previous releases
------------------
+Use the links below to download a distribution of Apache Sentry from one of our
+mirrors. It is good practice to verify the integrity of the distribution files.
+Apache Sentry releases are available under the [Apache License, Version 2.0][1]
+ - see the LICENSE.txt and NOTICE.txt files contained in each release artifact.
 
-* [1.6.0-incubating][9] ([changelog][10])
-* [1.5.1-incubating][7] ([changelog][8])
-* [1.4.0-incubating][5] ([changelog][6])
-* [1.3.0-incubating][3] ([changelog][4])
-* [1.2.0-incubating][1] ([changelog][2])
-
-  [1]: http://archive.apache.org/dist/sentry/1.2.0-incubating
-  [2]: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12314720&version=12325059
-  [3]: http://archive.apache.org/dist/sentry/1.3.0-incubating
-  [4]: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12314720&version=12325060
-  [5]: http://archive.apache.org/dist/sentry/1.4.0-incubating
-  [6]: https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12326252&projectId=12314720
-  [7]: http://www.apache.org/dyn/closer.cgi/sentry/1.5.1-incubating
-  [8]: https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12327461&projectId=12314720
-  [9]: http://www.apache.org/dyn/closer.cgi/sentry/1.6.0-incubating
-  [10]: https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12329716&projectId=12314720
-  [11]: http://www.apache.org/dyn/closer.cgi/sentry/1.7.0-incubating
-  [12]: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12314720&version=12333348
+Current official release (closest mirror site selected automatically)
+---------------
+* [1.7.0][2] ([changelog][3]) ([PGP][4]) ([MD5][5]) ([SHA][6])
+
+An older branch release is (closest mirror site selected automatically)
+---------------
+* [1.6.0][7] ([changelog][8]) ([PGP][9]) ([MD5][10]) ([SHA][11])
+
+Verifying Releases
+---------------
+
+When downloading from a mirror please check the SHA1/MD5 checksums as well as
+verifying the OpenPGP compatible signature available from the main Apache site.
+The [KEYS][12] file contains the public keys used for signing the release. It
+is recommended that a web of trust is used to confirm the identity of these
+keys.
+
+You can check the OpenPGP compatible signature with GnuPG via:
+
+ * gpg --import KEYS
+ * gpg --verify apache-sentry-*-src.tar.gz.asc
+
+The digests are stored in the files called 'apache-sentry-*-src.tar.gz.md5' and
+'apache-sentry-*-src.tar.gz.sha'. You can verify the digests by using a tool
+like md5sum or sha1sum as follows:
+
+ * md5sum apache-sentry-*-src.tar.gz (and compare output to the relevant
+digest in apache-sentry-*-src.tar.gz.md5)
+ * sha1sum apache-sentry-*-src.tar.gz (and compare output to the relevant
+digest in apache-sentry-*-src.tar.gz.mds)
+
+Archive of old releases
+---------------
+
+Older releases are available in the [archive][13].
+
+  [1]: http://www.apache.org/licenses/LICENSE-2.0
+  [2]: http://www.apache.org/dyn/closer.cgi/sentry/1.7.0
+  [3]: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12314720&version=12333348
+  [4]: https://www.apache.org/dist/sentry/1.7.0/apache-sentry-1.7.0-src.tar.gz.asc
+  [5]: https://www.apache.org/dist/sentry/1.7.0/apache-sentry-1.7.0-src.tar.gz.md5
+  [6]: https://www.apache.org/dist/sentry/1.7.0/apache-sentry-1.7.0-src.tar.gz.sha
+  [7]: http://www.apache.org/dyn/closer.cgi/sentry/1.6.0-incubating
+  [8]: https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12329716&projectId=12314720
+  [9]: https://www.apache.org/dist/sentry/1.6.0-incubating/apache-sentry-1.6.0-incubating-src.tar.gz.asc
+  [10]: https://www.apache.org/dist/sentry/1.6.0-incubating/apache-sentry-1.6.0-incubating-src.tar.gz.md5
+  [11]: https://www.apache.org/dist/sentry/1.6.0-incubating/apache-sentry-1.6.0-incubating-src.tar.gz.sha
+  [12]: https://www.apache.org/dist/sentry/KEYS
+  [13]: https://archive.apache.org/dist/sentry/