This is an automated email from the ASF dual-hosted git repository. twolf pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/mina-site.git
commit df111bc37c05cfce99e9ce9c5c8f1ec1377104c9 Author: Thomas Wolf <[email protected]> AuthorDate: Tue Aug 19 21:40:08 2025 +0200 Add "Verifying Releases" sidebar link Someone complained a while back that our KEYS file wasn't linked anywhere. There was already an incomplete validating-release.md, but it wasn't linked from anywhere. Rename that to verifying-releases.md and complete it; link it from the sidebar menu. --- layouts/_default/baseof.html | 1 + source/sshd-project/downloads.md | 2 ++ source/validating-release.md | 16 ---------------- source/verifying-releases.md | 18 ++++++++++++++++++ 4 files changed, 21 insertions(+), 16 deletions(-) diff --git a/layouts/_default/baseof.html b/layouts/_default/baseof.html index 0327e7b8a..bd7dc415f 100644 --- a/layouts/_default/baseof.html +++ b/layouts/_default/baseof.html @@ -57,6 +57,7 @@ <ul> <li><a href="/mailing-lists.html" class="external-link" rel="nofollow">Mailing lists & IRC</a></li> <li><a href="/issue-tracking.html" class="external-link" rel="nofollow">Issue tracking</a></li> + <li><a href="/verifying-releases.html" class="external-link" rel="nofollow">Verifying Releases</a></li> </ul> <h5>Community</h5> diff --git a/source/sshd-project/downloads.md b/source/sshd-project/downloads.md index 832ca206b..738c8215e 100644 --- a/source/sshd-project/downloads.md +++ b/source/sshd-project/downloads.md @@ -15,6 +15,8 @@ See the [release notes](download_{{< version_sshd >}}.html). * [Apache Mina SSHD {{< version_sshd >}} Binary (.tar.gz)](https://www.apache.org/dyn/closer.lua/mina/sshd/{{< version_sshd >}}/apache-sshd-{{< version_sshd >}}.tar.gz) [PGP](https://www.apache.org/dist/mina/sshd/{{< version_sshd >}}/apache-sshd-{{< version_sshd >}}.tar.gz.asc) [SHA512](https://www.apache.org/dist/mina/sshd/{{< version_sshd >}}/apache-sshd-{{< version_sshd >}}.tar.gz.sha512) * [Apache Mina SSHD {{< version_sshd >}} Binary (.zip)](https://www.apache.org/dyn/closer.lua/mina/sshd/{{< version_sshd >}}/apache-sshd-{{< version_sshd >}}.zip) [PGP](https://www.apache.org/dist/mina/sshd/{{< version_sshd >}}/apache-sshd-{{< version_sshd >}}.zip.asc) [SHA512](https://www.apache.org/dist/mina/sshd/{{< version_sshd >}}/apache-sshd-{{< version_sshd >}}.zip.sha512) +See also [Verifying Releases](/verifying-releases.html). + # Development snapshots You can [build](building.html) the latest version from [sources](sources.html). diff --git a/source/validating-release.md b/source/validating-release.md deleted file mode 100644 index 374d012d1..000000000 --- a/source/validating-release.md +++ /dev/null @@ -1,16 +0,0 @@ ---- -title: Verifying Release ---- - -# Validating Release - -Down the GPG keys and import them - -```bash -wget https://downloads.apache.org/mina/KEYS -gpg --import KEYS -``` - -Download the release and verify checksums and signatures - -WIP diff --git a/source/verifying-releases.md b/source/verifying-releases.md new file mode 100644 index 000000000..7ce35bc84 --- /dev/null +++ b/source/verifying-releases.md @@ -0,0 +1,18 @@ +--- +title: Verifying Releases +--- + +# Verifying Releases + +PGP signing public keys for all releases are available in the [Apache MINA KEYS file](https://downloads.apache.org/mina/KEYS). + +Download the GPG keys and import them: + +```bash +wget https://downloads.apache.org/mina/KEYS +gpg --import KEYS +``` + +(Signing keys are also available via the usual key servers.) + +Download the release and verify checksums and signatures following the general guidelines given at [Verifying ASF Releases](https://www.apache.org/info/verification.html).
