[
https://issues.apache.org/jira/browse/OWB-973?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sebb reopened OWB-973:
----------------------
Sorry, just noticed another issue.
The download page does not include links to the hashes.
Both md5 and sha hashes are present on the dist/ mirror.
It is important that at least one is available for consumers to be able to
check downloads for completeness.
> Download page hash and sig links don't work
> -------------------------------------------
>
> Key: OWB-973
> URL: https://issues.apache.org/jira/browse/OWB-973
> Project: OpenWebBeans
> Issue Type: Bug
> Components: Samples & Documentation
> Environment: http://openwebbeans.apache.org/download.html
> Reporter: Sebb
> Assignee: Mark Struberg
> Fix For: 2.0.0
>
>
> The download page hash and sig links don't work.
> This is because hashes and sigs are not mirrored to external servers.
> The download page must link to the ASF copies, for example
> www.apache.org/dist/openwebbeans/1.2.0/openwebbeans-distribution-1.2.0-binary.zip.asc
> Also, the download page must contain a link to the KEYS file which is needed
> for validating signatures.
> The page should also contain details of how to check hashes and sigs (or a
> link to a suitable description).
--
This message was sent by Atlassian JIRA
(v6.2#6252)
