[
https://issues.apache.org/jira/browse/SENSSOFT-288?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Lewis John McGibbney closed SENSSOFT-288.
-----------------------------------------
> Download page must not link to dist.apache.org
> ----------------------------------------------
>
> Key: SENSSOFT-288
> URL: https://issues.apache.org/jira/browse/SENSSOFT-288
> Project: SensSoft
> Issue Type: Bug
> Components: website
> Environment: http://senssoft.incubator.apache.org/releases/
> Reporter: Sebb
> Assignee: Lewis John McGibbney
> Priority: Major
> Fix For: UserALE.js 1.0.0
>
>
> The download page currently links to [https://dist.apache.org/] for the
> hashes and sigs.
> However that host is only intended as a staging area for use by developers.
> Please can you change the links to use the ASF webserver instead?
> i.e.. change
> [https://dist.apache.org/repos/dist/release/]...
> to
> [https://www.apache.org/dist/]...
> wherever it appears.
> Also the download page should use https (SSL) to link to the KEYS file:
> [https://www.apache.org/dist/.../KEYS]
> Also the following command:
> {code:java}
> $ gpg --verify apache-senssoft-useralejs-1.0.0-src.zip.asc
> {code}
> should read
> {code:java}
> $ gpg --verify apache-senssoft-useralejs-1.0.0-src.zip.asc
> apache-senssoft-useralejs-1.0.0-src.zip
> {code}
> i.e. both the detached sig and the artifact itself should be specified.
> See: [https://www.apache.org/info/verification.html#CheckingSignatures]
> Thanks
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
