[
https://issues.apache.org/jira/browse/CLIMATE-521?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14174560#comment-14174560
]
Sebb commented on CLIMATE-521:
------------------------------
There is no link to the KEYS file.
Also there is no explanation as to how users can perform the verification.
Further, there should be links to hashes and sigs for the archived releases.
The phrase "release signature(s) e.g." is inaccurate, as only the .asc file is
a signature, the others are hashes.
Note that the download link could be customised as follows:
https://www.apache.org/dyn/closer.cgi/climate/0.4/
Aside: the page uses slightly different colours of blue for headings and links;
this is quite confusing.
> Downloads must use ASF mirror system; also have sigs and hashes
> ---------------------------------------------------------------
>
> Key: CLIMATE-521
> URL: https://issues.apache.org/jira/browse/CLIMATE-521
> Project: Apache Open Climate Workbench
> Issue Type: Bug
> Components: website
> Reporter: Sebb
>
> The download link in [1] currently points directly to the ASF server:
> https://www.apache.org/dist/climate/0.4/
> This is not allowed.
> Downloads MUST use the ASF mirroring system for current releases.
> Also users must be able to check the hashes and sigs for a release.
> Please read:
> http://www.apache.org/dev/release.html
> and
> http://www.apache.org/dev/release-download-pages
> [1] http://climate.apache.org/index.html
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
