Repository: incubator-juneau-website Updated Branches: refs/heads/asf-site 671126b63 -> 7e18a3865
Add instructions on how to verify downloads. Project: http://git-wip-us.apache.org/repos/asf/incubator-juneau-website/repo Commit: http://git-wip-us.apache.org/repos/asf/incubator-juneau-website/commit/7e18a386 Tree: http://git-wip-us.apache.org/repos/asf/incubator-juneau-website/tree/7e18a386 Diff: http://git-wip-us.apache.org/repos/asf/incubator-juneau-website/diff/7e18a386 Branch: refs/heads/asf-site Commit: 7e18a3865fdc8a1314035f600c98dc1c5ac9d936 Parents: 671126b Author: JamesBognar <[email protected]> Authored: Thu Oct 5 16:02:39 2017 -0400 Committer: JamesBognar <[email protected]> Committed: Thu Oct 5 16:02:39 2017 -0400 ---------------------------------------------------------------------- content/downloads.html | 48 ++++++++++++++++++++++++++++++++++++++++++++- 1 file changed, 47 insertions(+), 1 deletion(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/incubator-juneau-website/blob/7e18a386/content/downloads.html ---------------------------------------------------------------------- diff --git a/content/downloads.html b/content/downloads.html index 6f603fb..56a26c0 100644 --- a/content/downloads.html +++ b/content/downloads.html @@ -67,7 +67,7 @@ </ul> </ul> <li><b>Maven</b> - <p class='bcode'> + <p class='bcode' style='max-width:800px;'> <xc><!-- Use the following dependency... --></xc> <xt><dependency></xt> <xt><groupId></xt>org.apache.juneau<xt></groupId></xt> @@ -88,6 +88,52 @@ <xt><artifactId></xt>juneau-microservice-server<xt></artifactId></xt> </p> </ul> + + <h5 class='toc'>Verifying file integrity</h5> + <p> + It is essential that you verify the integrity of the downloaded files using the PGP or MD5 signatures. + </p> + <p> + The PGP signatures can be verified using PGP or GPG. + <br>First download the <a class='doclink' href='https://www.apache.org/dist/incubator/juneau/KEYS'>KEYS</a> as well + as the asc signature file for the relevant distribution. + <br>Make sure you get these files from the <a class='doclink' href='http://www.apache.org/dist/incubator/juneau'>main distribution directory</a> rather than from a mirror. + <br>Then verify the signatures using: + </p> + <p class='bcode' style='max-width:800px;'> + pgpk -a KEYS + pgpv apache-juneau-6.4.0-incubating-bin.zip.asc + </p> + <p> + ... or ... + </p> + <p class='bcode' style='max-width:800px;'> + pgp -ka KEYS + apache-juneau-6.4.0-incubating-bin.zip.asc + </p> + <p> + ... or ... + </p> + <p class='bcode' style='max-width:800px;'> + gpg --import KEYS + gpg --verify apache-juneau-6.4.0-incubating-bin.zip.asc apache-juneau-6.4.0-incubating-bin.zip + </p> + <p> + Alternatively, you can verify the MD5 signature on the files. + <br>A unix program called md5 or md5sum is included in many unix distributions. + It is also available as part of <a class='doclink' href='http://www.gnu.org/software/textutils/textutils.html'>GNU Textutils</a>. + <br>Windows users can get binary md5 programs from any of the following: + </p> + <ul> + <li><a class='doclink' href='http://www.fourmilab.ch/md5/'>MD5 Command Line Message Digest Utility</a> + <li><a class='doclink' href='http://www.pc-tools.net/win32/freeware/console/'>PC-Tools MD5SUMS</a> + <li><a class='doclink' href='http://www.slavasoft.com/fsum/'>SlavaSoft FSUM</a> + </ul> + <p> + An MD5 signature consists of 32 hex characters, and a SHA1 signature consists of 40 hex characters. + <br>Ensure your generated signature string matches the signature string published in the files above. + </p> + <h5 class='toc'>Older releases</h5> <p class='download'> 6.3.1 (Aug 2, 2017)
