New automated processes have found problems with the download page.
Unfortunately, the problems are being disclosed one at a time, so it may
take a while to discover all of them. So far, the problems have been:
o Links to the checksums were phrased as http rather than https. I have
changed them to https.
o The referenced KEYS file
(https://dist.apache.org/repos/dist/release/db/derby/KEYS";>KEYS) is no
longer an appropriate location for a KEYS file. The authorities want
something like https://www.apache.org/dist/<project>/KEYS. I am hoping
that the authorities will be satisfied with the following address, which
does have a valid KEYS file: https://www.apache.org/dist/db/derby/KEYS
Thanks for your patience,
-Rick
