[ 
https://issues.apache.org/jira/browse/DELTASPIKE-1310?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16311276#comment-16311276
 ] 

Sebb commented on DELTASPIKE-1310:
----------------------------------

Also the GPG verification instructions are wrong.

The command line should be (for example):

$ gpg --verify deltaspike-project-1.8.1-source-release.zip.asc 
deltaspike-project-1.8.1-source-release.zip

it's important to provide both the sig file (which must be the first parameter) 
and the target to be checked, see:

See:
https://www.apache.org/info/verification.html#CheckingSignatures


>  Please use https (SSL) for links to KEYS, hashes, sigs
> -------------------------------------------------------
>
>                 Key: DELTASPIKE-1310
>                 URL: https://issues.apache.org/jira/browse/DELTASPIKE-1310
>             Project: DeltaSpike
>          Issue Type: Bug
>         Environment: https://deltaspike.apache.org/download.html
>            Reporter: Sebb
>
> As the subject says: Please use https (SSL) for links to KEYS, hashes, sigs.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to