[
https://issues.apache.org/jira/browse/KNOX-1405?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16562718#comment-16562718
]
Larry McCay commented on KNOX-1405:
-----------------------------------
[[email protected]] - thank you for filing these and clearly spelling out what
needs doing here.
I've addressed all of the issues you raised here for the 1.1.0 release.
The gpg command actually works just fine without specifying both files - so I
have left that as is.
> Download page must link to KEYS and contain verification details
> ----------------------------------------------------------------
>
> Key: KNOX-1405
> URL: https://issues.apache.org/jira/browse/KNOX-1405
> Project: Apache Knox
> Issue Type: Bug
> Reporter: Sebb
> Assignee: Larry McCay
> Priority: Major
>
> The download page
> https://cwiki.apache.org/confluence/display/KNOX/Release+1.1.0
> does not appear to contain a link to the KEYS file.
> The text "Verifying Apache HTTP Server Releases" should be a link.
> The gpg command should be:
> % gpg --verify knox-1.1.0.zip.asc knox-1.1.0.zip
> i.e. both sig and artifact need to be supplied
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
