[
https://issues.apache.org/jira/browse/DATAFU-137?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16370374#comment-16370374
]
Matthew Hayes commented on DATAFU-137:
--------------------------------------
We don't need the "Source" prefix since this whole section is for source
releases. Otherwise the PGP, MD5 and SHA512 text appearing after looks good.
For the latest release you can link to the ASC, MD5 and SHA512 files under
[http://www-us.apache.org/dist/incubator/datafu/apache-datafu-incubating-1.3.3/].
Otherwise you can use the archive site, e.g. for 1.3.2 under
[https://archive.apache.org/dist/incubator/datafu/apache-datafu-incubating-1.3.2/].
For the KEYS file, we currently have 2 links. Both of these should use https.
Once you attach a patch I can check it and update the site once I have it
merged.
> KEYS sigs and hashes must be linked from the download page
> ----------------------------------------------------------
>
> Key: DATAFU-137
> URL: https://issues.apache.org/jira/browse/DATAFU-137
> Project: DataFu
> Issue Type: Bug
> Reporter: Sebb
> Priority: Major
>
> The download page refers to verifying downloads, but leaves it up to the user
> to find the sigs and hashes.
> The sigs and hashes should be listed beside the files to which they apply.
> See for example:
> https://httpd.apache.org/download.cgi#apache24
> which uses a simple table.
> URLs should use https, e.g.
> https://www.apache.org/dist/incubator/datafu/apache-datafu-incubating-1.3.3/apache-datafu-incubating-sources-1.3.3.tgz.asc
> The KEYS file URL should use https, and must use the ASF main host, i.e.
> https://www.apache.org/dist/incubator/datafu/KEYS
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
