[
https://issues.apache.org/jira/browse/TOBAGO-1834?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16289209#comment-16289209
]
Sebb commented on TOBAGO-1834:
------------------------------
Just noticed another problem with the download page:
The "Verifying signatures" section has some sample command-lines.
However the commands are all shown on one line.
Also, the gpg command must include the name of the archive, for example:
% gpg --verify myfaces-tobago-<version>-dist.tar.gz.asc
myfaces-tobago-<version>-dist.tar.gz
See:
https://www.apache.org/info/verification.html#CheckingSignatures
> Please use HTTPS for the KEYS link
> ----------------------------------
>
> Key: TOBAGO-1834
> URL: https://issues.apache.org/jira/browse/TOBAGO-1834
> Project: MyFaces Tobago
> Issue Type: Bug
> Environment: http://myfaces.apache.org/tobago/download.html
> Reporter: Sebb
> Assignee: Udo Schnurpfeil
> Priority: Minor
>
> As the subject says.
> The download page already uses https for hashes and sigs; it needs to also do
> so for the KEYS file please.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
