arnavsharma990 opened a new issue, #185: URL: https://github.com/apache/nuttx-website/issues/185
## Description The SHA-512 and Signature links on the download page currently point to the Apache mirror selector instead of the canonical distribution host. As a result, clicking these links returns an HTML mirror-selection page rather than the requested checksum/signature file. The download page itself states that hash and signature files are hosted at Apache. ## Reproduction On https://nuttx.apache.org/download/, open a current Apache release (e.g. 13.0.1) and click its SHA-512 link. For example, the generated URL for 12.12.0 is: https://www.apache.org/dyn/closer.lua/nuttx/12.12.0/apache-nuttx-12.12.0.tar.gz.sha512 This returns: - HTTP 200 - `text/html` - approximately 21 KB - Apache mirror-selection HTML The corresponding canonical checksum URL is: https://downloads.apache.org/nuttx/12.12.0/apache-nuttx-12.12.0.tar.gz.sha512 This returns: - HTTP 200 - `text/plain` - the actual SHA-512 checksum The same behavior occurs for the `.asc` signature links. ## Root cause `download.md:51-52` currently builds the SHA-512 and Signature URLs using `release.artifact-root`: ```liquid {{release.artifact-root}}/{{release.source-os-dist}}.sha512 {{release.artifact-root}}/{{release.source-os-dist}}.asc -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
