Author: bodewig
Date: Wed Oct 5 08:34:45 2011
New Revision: 1179101
URL: http://svn.apache.org/viewvc?rev=1179101&view=rev
Log:
explain the story of the new string name key
Modified:
logging/log4net/trunk/src/site/apt/download.apt
logging/log4net/trunk/src/site/xdoc/release/faq.xml
Modified: logging/log4net/trunk/src/site/apt/download.apt
URL:
http://svn.apache.org/viewvc/logging/log4net/trunk/src/site/apt/download.apt?rev=1179101&r1=1179100&r2=1179101&view=diff
==============================================================================
--- logging/log4net/trunk/src/site/apt/download.apt (original)
+++ logging/log4net/trunk/src/site/apt/download.apt Wed Oct 5 08:34:45 2011
@@ -26,23 +26,12 @@ Download Apache log4net™
binary only release.
There are two different binary releases, <<<oldkey>>> and
- <<<newkey>>>. Both contain assemblies built for all supported
+ <<<newkey>>>. Both contain assemblies built for most supported
platforms and have been built from the same code base, they only
differ in the strong name key used to sign the assemblies.
- The <<<oldkey>>> distribution contains assemblies signed with the
- same strong name key that was used to sign the assemblies of log4net
- 1.2.10 and earlier. This strong name key is only available to
- log4net developers.
-
- The <<<newkey>>> distribution contains assemblies signed with the
- strong name key available from
-
{{{https://svn.apache.org/repos/asf/logging/log4net/trunk/log4net.snk}log4net's
svn area}}.
- Everybody can create assemblies that have the same strong name which
- is important if you want to use your own patched version of log4net.
-
- We recommend you use the assemblies signed with the "new" key
- whenever possible.
+ See {{{./release/faq.html#two-snks}the FAQ}} for background. We recommend
+ you use the assemblies signed with the "new" key whenever possible.
The link in the Mirrors column will lead you to a list of available
mirrors with a default selection based on your inferred location.
@@ -54,11 +43,11 @@ Download Apache log4net™
| Mirrors | Checksum | Signature |
*------------------------+---------+----------+-----------+
*------------------------+---------+----------+-----------+
- log4net 1.2.10 Source Distribution |
{{{http://www.apache.org/dyn/closer.cgi/logging/log4net/1.2.11/source/log4net-1.2.11-src.zip}
log4net-1.2.11-src.zip}} |
{{{http://www.apache.org/dist/logging/log4net/1.2.11/source/log4net-1.2.11-src.zip.md5}
log4net-1.2.11-src.zip.md5}} |
{{{http://www.apache.org/dist/logging/log4net/1.2.11/source/log4net-1.2.11-src.zip.asc}
log4net-1.2.11-src.zip.asc}}|
+ log4net 1.2.11 Source Distribution |
{{{http://www.apache.org/dyn/closer.cgi/logging/log4net/1.2.11/source/log4net-1.2.11-src.zip}
log4net-1.2.11-src.zip}} |
{{{http://www.apache.org/dist/logging/log4net/1.2.11/source/log4net-1.2.11-src.zip.md5}
log4net-1.2.11-src.zip.md5}} |
{{{http://www.apache.org/dist/logging/log4net/1.2.11/source/log4net-1.2.11-src.zip.asc}
log4net-1.2.11-src.zip.asc}}|
*------------------------+---------+----------+-----------+
- log4net 1.2.10 Binary Distribution New Strong Name |
{{{http://www.apache.org/dyn/closer.cgi/logging/log4net/1.2.11/binaries/log4net-1.2.11-bin-newkey.zip}
log4net-1.2.11-bin-newkey.zip}} |
{{{http://www.apache.org/dist/logging/log4net/1.2.11/binaries/log4net-1.2.11-bin-newkey.zip.md5}
log4net-1.2.11-bin-newkey.zip.md5}} |
{{{http://www.apache.org/dist/logging/log4net/1.2.11/binaries/log4net-1.2.11-bin-newkey.zip.asc}
log4net-1.2.11-bin-newkey.zip.asc}}|
+ log4net 1.2.11 Binary Distribution New Strong Name |
{{{http://www.apache.org/dyn/closer.cgi/logging/log4net/1.2.11/binaries/log4net-1.2.11-bin-newkey.zip}
log4net-1.2.11-bin-newkey.zip}} |
{{{http://www.apache.org/dist/logging/log4net/1.2.11/binaries/log4net-1.2.11-bin-newkey.zip.md5}
log4net-1.2.11-bin-newkey.zip.md5}} |
{{{http://www.apache.org/dist/logging/log4net/1.2.11/binaries/log4net-1.2.11-bin-newkey.zip.asc}
log4net-1.2.11-bin-newkey.zip.asc}}|
*------------------------+---------+----------+-----------+
- log4net 1.2.10 Binary Distribution Old Strong Name |
{{{http://www.apache.org/dyn/closer.cgi/logging/log4net/1.2.11/binaries/log4net-1.2.11-bin-oldkey.zip}
log4net-1.2.11-bin-oldkey.zip}} |
{{{http://www.apache.org/dist/logging/log4net/1.2.11/binaries/log4net-1.2.11-bin-oldkey.zip.md5}
log4net-1.2.11-bin-oldkey.zip.md5}} |
{{{http://www.apache.org/dist/logging/log4net/1.2.11/binaries/log4net-1.2.11-bin-oldkey.zip.asc}
log4net-1.2.11-bin-oldkey.zip.asc}}|
+ log4net 1.2.11 Binary Distribution Old Strong Name |
{{{http://www.apache.org/dyn/closer.cgi/logging/log4net/1.2.11/binaries/log4net-1.2.11-bin-oldkey.zip}
log4net-1.2.11-bin-oldkey.zip}} |
{{{http://www.apache.org/dist/logging/log4net/1.2.11/binaries/log4net-1.2.11-bin-oldkey.zip.md5}
log4net-1.2.11-bin-oldkey.zip.md5}} |
{{{http://www.apache.org/dist/logging/log4net/1.2.11/binaries/log4net-1.2.11-bin-oldkey.zip.asc}
log4net-1.2.11-bin-oldkey.zip.asc}}|
*------------------------+---------+----------+-----------+
Please read {{{http://httpd.apache.org/dev/verification.html}Verifying
Apache HTTP Server Releases}}
Modified: logging/log4net/trunk/src/site/xdoc/release/faq.xml
URL:
http://svn.apache.org/viewvc/logging/log4net/trunk/src/site/xdoc/release/faq.xml?rev=1179101&r1=1179100&r2=1179101&view=diff
==============================================================================
--- logging/log4net/trunk/src/site/xdoc/release/faq.xml (original)
+++ logging/log4net/trunk/src/site/xdoc/release/faq.xml Wed Oct 5 08:34:45 2011
@@ -286,6 +286,62 @@ limitations under the License.
</section>
<p><a href="#top">Back to Top</a></p>
+ <section id="two-snks"
+ name="Why are there two different strong name keys?">
+ <p>
+ Starting with log4net 1.2.11 there are two
+ different binary distributions,
+ <code>oldkey</code> and <code>newkey</code>.
+ </p>
+
+ <p>
+ The <code>oldkey</code> distribution contains
+ assemblies signed with the same strong name key
+ that was used to sign the assemblies of log4net
+ 1.2.10 and earlier. This strong name key is only
+ available to log4net developers.
+ </p>
+
+ <p>
+ The <code>newkey</code> distribution contains
+ assemblies signed with the strong name key
+ available from <a
+
href="https://svn.apache.org/repos/asf/logging/log4net/trunk/log4net.snk";>log4net's
+ svn area</a> or inside the source distribution.
+ Everybody can create assemblies that have the same
+ strong name.
+ </p>
+
+ <p>
+ For open source projects it is important that you
+ can create your own patched version of a product
+ and use it instead of the official release. This
+ is something that is now possible if the
+ <code>newkey</code> is used throughout.
+ </p>
+
+ <p>
+ The <code>oldkey</code> distribution is mostly
+ only for people who work with third-party
+ dependencies that require one of the earlier
+ releases of log4net and can't be recompiled to use
+ the new strong name. If you start a new project
+ or can recompile all your dependencies we strongly
+ recommend you use the <code>newkey</code>
+ assemblies.
+ </p>
+
+ <p>
+ Note that the "new" strong name no longer provides
+ any kind of authenticity. If you want to be sure
+ you have the "real" Apache log4net, download the binary
+ release from one of the mirrors and verify the PGP
+ signature.
+ </p>
+
+ </section>
+ <p><a href="#top">Back to Top</a></p>
+
</section>
<section id="configuration" name="Configuration">
