Repository: incubator-ranger Updated Branches: refs/heads/master e437615f7 -> 39439cebf
RANGER-914 - Adding section on verifying releases Project: http://git-wip-us.apache.org/repos/asf/incubator-ranger/repo Commit: http://git-wip-us.apache.org/repos/asf/incubator-ranger/commit/39439ceb Tree: http://git-wip-us.apache.org/repos/asf/incubator-ranger/tree/39439ceb Diff: http://git-wip-us.apache.org/repos/asf/incubator-ranger/diff/39439ceb Branch: refs/heads/master Commit: 39439cebff0e02a3f680b67ce7b3c46380c45c49 Parents: e437615 Author: Colm O hEigeartaigh <[email protected]> Authored: Wed May 4 10:52:57 2016 +0100 Committer: Colm O hEigeartaigh <[email protected]> Committed: Wed May 4 10:52:57 2016 +0100 ---------------------------------------------------------------------- docs/src/site/xdoc/download.xml | 31 +++++++++++++++++++++++++++---- 1 file changed, 27 insertions(+), 4 deletions(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/incubator-ranger/blob/39439ceb/docs/src/site/xdoc/download.xml ---------------------------------------------------------------------- diff --git a/docs/src/site/xdoc/download.xml b/docs/src/site/xdoc/download.xml index b3003ba..54c8232 100644 --- a/docs/src/site/xdoc/download.xml +++ b/docs/src/site/xdoc/download.xml @@ -35,8 +35,8 @@ The current stable release is Apache Ranger 0.5.2: </p> <p> <a href="http://www.apache.org/dyn/closer.lua/incubator/ranger/0.5.2-incubating/apache-ranger-incubating-0.5.2.tar.gz";>apache-ranger-incubating-0.5.2.tar.gz</a> -(<a href="http://www.apache.org/dist/incubator/ranger/0.5.2-incubating/apache-ranger-incubating-0.5.2.tar.gz.asc";>PGP</a>) -(<a href="http://www.apache.org/dist/incubator/ranger/0.5.2-incubating/apache-ranger-incubating-0.5.2.tar.gz.mds";>Digests</a>) +(<a href="https://www.apache.org/dist/incubator/ranger/0.5.2-incubating/apache-ranger-incubating-0.5.2.tar.gz.asc";>PGP</a>) +(<a href="https://www.apache.org/dist/incubator/ranger/0.5.2-incubating/apache-ranger-incubating-0.5.2.tar.gz.mds";>Digests</a>) </p> </li> <li> @@ -45,12 +45,35 @@ The older branch release is Apache Ranger 0.4.0: </p> <p> <a href="http://www.apache.org/dyn/closer.lua/incubator/ranger/0.4.0-incubating/ranger-0.4.0-incubating.tar.gz";>ranger-0.4.0-incubating.tar.gz</a> -(<a href="http://www.apache.org/dist/incubator/ranger/0.4.0-incubating/ranger-0.4.0-incubating.tar.gz.asc";>PGP</a>) -(<a href="http://www.apache.org/dist/incubator/ranger/0.4.0-incubating/ranger-0.4.0-incubating.tar.gz.mds";>Digests</a>) +(<a href="https://www.apache.org/dist/incubator/ranger/0.4.0-incubating/ranger-0.4.0-incubating.tar.gz.asc";>PGP</a>) +(<a href="https://www.apache.org/dist/incubator/ranger/0.4.0-incubating/ranger-0.4.0-incubating.tar.gz.mds";>Digests</a>) </p> </li> </ul> </subsection> +<subsection name="Verifying Releases"> +<p> +When downloading from a mirror please check the SHA1/MD5 checksums as well +as verifying the OpenPGP compatible signature available from the main Apache +site. The <a href="https://www.apache.org/dist/incubator/ranger/KEYS";>KEYS</a> +file contains the public keys used for signing the release. It is recommended +that a web of trust is used to confirm the identity of these keys. +</p> +<p> +You can check the OpenPGP compatible signature with GnuPG via: +<ul> +<li>gpg --import KEYS</li> +<li>gpg --verify apache-ranger-*.tar.gz.asc</li> +</ul> +</p> +<p> +The digests are stored in the file called 'apache-ranger-*.tar.gz.mds'. You can verify the digests by using a tool like md5sum or sha1sum as follows: +<ul> +<li>md5sum apache-ranger-*.tar.gz (and compare output to the relevant digest in apache-ranger-*.tar.gz.mds)</li> +<li>sha1sum apache-ranger-*.tar.gz (and compare output to the relevant digest in apache-ranger-*.tar.gz.mds)</li> +</ul> +</p> +</subsection> <subsection name="Archive of old releases"> <p> Older releases are available in the <a href="http://archive.apache.org/dist/incubator/ranger/";>archive</a>.
