[
https://issues.apache.org/jira/browse/CLIMATE-521?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14174691#comment-14174691
]
Lewis John McGibbney commented on CLIMATE-521:
----------------------------------------------
bq. There is no link to the KEYS file.
There is now - http://climate.apache.org/downloads.html#pgp-signature
bq. Also there is no explanation as to how users can perform the verification.
There is now - http://climate.apache.org/downloads.html#verify-releases
bq. Further, there should be links to hashes and sigs for the archived releases.
I've made best efforts to guide people here -
http://climate.apache.org/downloads.html#previous-releases
I've never before provided links to hashes and sigs for all previous releases
on the main downloads page. I think that this is unnecessary.
bq. The phrase "release signature(s) e.g." is inaccurate, as only the .asc file
is a signature, the others are hashes.
This is not true, there were two .asc files, however the wording has been
changes none-the-less
bq. Note that the download link could be customised as follows:
Done
bq. Aside: the page uses slightly different colours of blue for headings and
links; this is quite confusing.
Thank you for the criticism it is taken on board. I think we _may_ be in for a
website overhaul soon, so this may actually change sooner rather than later.
OK [[email protected]], I hope that this issue can now be resolved and closed
off. Thanks for the input.
> Downloads must use ASF mirror system; also have sigs and hashes
> ---------------------------------------------------------------
>
> Key: CLIMATE-521
> URL: https://issues.apache.org/jira/browse/CLIMATE-521
> Project: Apache Open Climate Workbench
> Issue Type: Bug
> Components: website
> Reporter: Sebb
>
> The download link in [1] currently points directly to the ASF server:
> https://www.apache.org/dist/climate/0.4/
> This is not allowed.
> Downloads MUST use the ASF mirroring system for current releases.
> Also users must be able to check the hashes and sigs for a release.
> Please read:
> http://www.apache.org/dev/release.html
> and
> http://www.apache.org/dev/release-download-pages
> [1] http://climate.apache.org/index.html
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
