[
https://issues.apache.org/jira/browse/JCR-4481?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Julian Reschke reassigned JCR-4481:
-----------------------------------
Assignee: Julian Reschke
> Download page gpg example needs second parameter
> ------------------------------------------------
>
> Key: JCR-4481
> URL: https://issues.apache.org/jira/browse/JCR-4481
> Project: Jackrabbit Content Repository
> Issue Type: Bug
> Reporter: Sebb
> Assignee: Julian Reschke
> Priority: Major
>
> It is important that the file being checked is also specified [1] on the gpg
> command line [2]
> If the second paramater is omitted, gpg can report success without actually
> checking the main artifact. This should not happen on correctly constructed
> ASF downloads, as we only provide detached sigs, but we should not be
> documenting bad practise.
> [1] https://www.apache.org/info/verification.html#specify_both
> [2] https://tika.apache.org/download.html
--
This message was sent by Atlassian Jira
(v8.3.2#803003)
