[
https://issues.apache.org/jira/browse/TOMEE-2975?focusedWorklogId=570975&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-570975
]
ASF GitHub Bot logged work on TOMEE-2975:
-----------------------------------------
Author: ASF GitHub Bot
Created on: 24/Mar/21 07:27
Start Date: 24/Mar/21 07:27
Worklog Time Spent: 10m
Work Description: rzo1 commented on pull request #21:
URL:
https://github.com/apache/tomee-site-generator/pull/21#issuecomment-805569951
I will merge it now (to fix it short term) - as the links are "manually"
validated. The discussion related to mirrors vs central is now on the mailing
list [1]. I will raise attention to this thread again (seems to be lost in
space) - hopefully, we can get an automated process of generating it, again.
Seems it would be required to upgrade the ASF parent pom to a newer version
to produce newer SHA signatures.
# Refs
[1]
http://mail-archives.apache.org/mod_mbox/tomee-dev/202103.mbox/%3C64f56282b078f80f813c37c5c6c81c36f186fcd3.camel%40apache.org%3E
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
Issue Time Tracking
-------------------
Worklog Id: (was: 570975)
Time Spent: 2h (was: 1h 50m)
> Download page must provide sigs for all release artifacts
> ---------------------------------------------------------
>
> Key: TOMEE-2975
> URL: https://issues.apache.org/jira/browse/TOMEE-2975
> Project: TomEE
> Issue Type: Bug
> Environment: http://tomee.apache.org/download-ng.html
> Reporter: Sebb
> Assignee: Richard Zowalla
> Priority: Major
> Time Spent: 2h
> Remaining Estimate: 0h
>
> None of the releases on the download page have signature files (.asc).
> These are required:
> [https://infra.apache.org/release-distribution#sigs-and-sums]
> The asc files are present on the download site, they just need to be linked
> from the page.
> Also there must be a link to the KEYS file, as well as download verification
> instructions.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
