Author: snagel
Date: Mon Aug 13 09:29:48 2018
New Revision: 1837932
URL: http://svn.apache.org/viewvc?rev=1837932&view=rev
Log:
Replace MD5 signatures by SHA512 for recent releases (1.15 and 2.3.1) to match
new Apache release signing policies
Modified:
nutch/cms_site/trunk/content/downloads.md
Modified: nutch/cms_site/trunk/content/downloads.md
URL:
http://svn.apache.org/viewvc/nutch/cms_site/trunk/content/downloads.md?rev=1837932&r1=1837931&r2=1837932&view=diff
==============================================================================
--- nutch/cms_site/trunk/content/downloads.md (original)
+++ nutch/cms_site/trunk/content/downloads.md Mon Aug 13 09:29:48 2018
@@ -39,8 +39,8 @@
href="https://www.apache.org/dyn/closer.lua/nutch/2.3.1/apache-nutch-2.3.1-src.tar.gz";>
apache-nutch-2.3.1-src.tar.gz </a></td>
<td colspan="1" rowspan="1"><a
-
href="https://apache.org/dist/nutch/2.3.1/apache-nutch-2.3.1-src.tar.gz.md5";>
- apache-nutch-2.3.1-src.tar.gz.md5</a></td>
+
href="https://apache.org/dist/nutch/2.3.1/apache-nutch-2.3.1-src.tar.gz.sha512";>
+ apache-nutch-2.3.1-src.tar.gz.sha512</a></td>
<td colspan="1" rowspan="1"><a
href="https://apache.org/dist/nutch/2.3.1/apache-nutch-2.3.1-src.tar.gz.asc";>
apache-nutch-2.3.1-src.tar.gz.asc</a></td>
@@ -52,8 +52,8 @@
href="https://www.apache.org/dyn/closer.lua/nutch/2.3.1/apache-nutch-2.3.1-src.zip";>
apache-nutch-2.3.1-src.zip</a></td>
<td colspan="1" rowspan="1"><a
- href="https://apache.org/dist/nutch/2.3.1/apache-nutch-2.3.1-src.zip.md5";>
- apache-nutch-2.3.1-src.zip.md5</a></td>
+
href="https://apache.org/dist/nutch/2.3.1/apache-nutch-2.3.1-src.zip.sha512";>
+ apache-nutch-2.3.1-src.zip.sha512</a></td>
<td colspan="1" rowspan="1"><a
href="https://apache.org/dist/nutch/2.3.1/apache-nutch-2.3.1-src.zip.asc";>
apache-nutch-2.3.1-src.zip.asc</a></td>
@@ -65,8 +65,8 @@
href="https://www.apache.org/dyn/closer.lua/nutch/1.15/apache-nutch-1.15-src.tar.gz";>
apache-nutch-1.15-src.tar.gz</a></td>
<td colspan="1" rowspan="1"><a
-
href="https://apache.org/dist/nutch/1.15/apache-nutch-1.15-src.tar.gz.md5";>
- apache-nutch-1.15-src.tar.gz.md5</a></td>
+
href="https://apache.org/dist/nutch/1.15/apache-nutch-1.15-src.tar.gz.sha512";>
+ apache-nutch-1.15-src.tar.gz.sha512</a></td>
<td colspan="1" rowspan="1"><a
href="https://apache.org/dist/nutch/1.15/apache-nutch-1.15-src.tar.gz.asc";>
apache-nutch-1.15-src.tar.gz.asc</a></td>
@@ -78,8 +78,8 @@
href="https://www.apache.org/dyn/closer.lua/nutch/1.15/apache-nutch-1.15-src.zip";>
apache-nutch-1.15-src.zip</a></td>
<td colspan="1" rowspan="1"><a
- href="https://apache.org/dist/nutch/1.15/apache-nutch-1.15-src.zip.md5";>
- apache-nutch-1.15-src.zip.md5</a></td>
+
href="https://apache.org/dist/nutch/1.15/apache-nutch-1.15-src.zip.sha512";>
+ apache-nutch-1.15-src.zip.sha512</a></td>
<td colspan="1" rowspan="1"><a
href="https://apache.org/dist/nutch/1.15/apache-nutch-1.15-src.zip.asc";>
apache-nutch-1.15-src.zip.asc</a></td>
@@ -91,8 +91,8 @@
href="https://www.apache.org/dyn/closer.lua/nutch/1.15/apache-nutch-1.15-bin.tar.gz";>
apache-nutch-1.15-bin.tar.gz</a></td>
<td colspan="1" rowspan="1"><a
-
href="https://apache.org/dist/nutch/1.15/apache-nutch-1.15-bin.tar.gz.md5";>
- apache-nutch-1.15-bin.tar.gz.md5</a></td>
+
href="https://apache.org/dist/nutch/1.15/apache-nutch-1.15-bin.tar.gz.sha512";>
+ apache-nutch-1.15-bin.tar.gz.sha512</a></td>
<td colspan="1" rowspan="1"><a
href="https://apache.org/dist/nutch/1.15/apache-nutch-1.15-bin.tar.gz.asc";>
apache-nutch-1.15-bin.tar.gz.asc</a></td>
@@ -104,8 +104,8 @@
href="https://www.apache.org/dyn/closer.lua/nutch/1.15/apache-nutch-1.15-bin.zip";>
apache-nutch-1.15-bin.zip</a></td>
<td colspan="1" rowspan="1"><a
- href="https://apache.org/dist/nutch/1.15/apache-nutch-1.15-bin.zip.md5";>
- apache-nutch-1.15-bin.zip.md5</a></td>
+
href="https://apache.org/dist/nutch/1.15/apache-nutch-1.15-bin.zip.sha512";>
+ apache-nutch-1.15-bin.zip.sha512</a></td>
<td colspan="1" rowspan="1"><a
href="https://apache.org/dist/nutch/1.15/apache-nutch-1.15-bin.zip.asc";>
apache-nutch-1.15-bin.zip.asc</a></td>
@@ -119,13 +119,13 @@
<h1>Verify Releases</h1>
<div class="section">
<p>
- It is essential that you verify the integrity of the downloaded files
using the PGP or MD5 signatures. Please read <a
+ It is essential that you verify the integrity of the downloaded files
using the PGP or SHA signatures (MD5 for older releases). Please read <a
href="https://httpd.apache.org/dev/verification.html";>Verifying Apache
HTTP Server Releases</a> for more information on why you
- should verify our releases. We strongly recommend you verify your
downloads with ASC, MD5 and SHA signatures.
+ should verify our releases. We strongly recommend you verify your
downloads with ASC, SHA and MD5 signatures.
</p>
<h2>PGP Signature</h2>
<p>
- The PGP signatures can be verified using <code>PGP</code> or
<code>MD5</code> First download the <a
+ The PGP signatures can be verified using <code>PGP</code> First download
the <a
href="https://www.apache.org/dist/nutch/KEYS";>KEYS</a> as well as the
<code>asc</code>
signature file for the relevant distribution. Make sure you get these
files from the <a href="https://www.apache.org/dist/nutch/";>main
distribution directory</a>, rather than from a mirror. Then verify the
signatures using
@@ -141,9 +141,12 @@
by Lewis John McGibbney (lewismc) 48BAEBF6.</p>
<p>The files in Apache Nurch 1.15 releases are signed
by Sebastian Nagel (snagel) DB0A9C6D.</p>
+ <h2>SHA Signature</h2>
+ <p>Additionally, you can verify the SHA signature on the files. A Unix
program called shasum or sha512sum is included in many
+ Unix distributions.</p>
+ <pre>$ sha512sum --check apache-nutch-X.Y.Z</pre>
<h2>MD5 Signature</h2>
- <p>Alternatively, you can verify the MD5 signature on the files. A unix
program called md5 or md5sum is included in many
- unix distributions.</p>
+ <p>Older releases used the MD5 signature. You may use the Unix program md5
or md5sum to verify the MD5 signature:</p>
<pre>$ md5sum apache-nutch-X.Y.Z</pre>
<pre>... output should match the string in apache-nutch-X.Y.Z.md5</pre>
</div>
