[ 
https://issues.apache.org/jira/browse/KNOX-1405?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16563841#comment-16563841
 ] 

Larry McCay commented on KNOX-1405:
-----------------------------------

Okay - thanks, [[email protected]]!

I don't want to manage more version specific links than required, so I will 
direct the lower one to the KEYS link at the top along with the signature links.

I'll change the pgp command as well even though that doc even says that it 
shouldn't be an issue for downloads from an ASF server. Since it is a best 
practice we'll go with it. I don't know whether the other commands have the 
same option or not, so I will likely just remove those examples completely.

Thanks again for the review!

> Download page must link to KEYS and contain verification details
> ----------------------------------------------------------------
>
>                 Key: KNOX-1405
>                 URL: https://issues.apache.org/jira/browse/KNOX-1405
>             Project: Apache Knox
>          Issue Type: Bug
>          Components: Release
>            Reporter: Sebb
>            Assignee: Larry McCay
>            Priority: Major
>             Fix For: 1.1.0
>
>
> The download page
> https://cwiki.apache.org/confluence/display/KNOX/Release+1.1.0
> does not appear to contain a link to the KEYS file.
> The text "Verifying Apache HTTP Server Releases" should be a link.
> The gpg command should be:
> % gpg --verify knox-1.1.0.zip.asc knox-1.1.0.zip
> i.e. both sig and artifact need to be supplied



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to