Author: ate
Date: Wed Apr 21 00:36:31 2010
New Revision: 936126

URL: http://svn.apache.org/viewvc?rev=936126&view=rev
Log:
PB-105: Download page does not have link to KEYS file

Modified:
    portals/site/bridges/src/site/xdoc/download.xml

Modified: portals/site/bridges/src/site/xdoc/download.xml
URL: 
http://svn.apache.org/viewvc/portals/site/bridges/src/site/xdoc/download.xml?rev=936126&r1=936125&r2=936126&view=diff
==============================================================================
--- portals/site/bridges/src/site/xdoc/download.xml (original)
+++ portals/site/bridges/src/site/xdoc/download.xml Wed Apr 21 00:36:31 2010
@@ -159,6 +159,33 @@
           The Release Notes for Portals Bridges Version 1.0.4 are available <a 
href="release-notes.html">here</a>.
         </p>
       </subsection>
+            <subsection name="Verify the integrity of the files">
+              <p>
+              It is essential that you verify the integrity of the downloaded 
files using the PGP or MD5 signatures.
+              Please read <a 
href="http://www.apache.org/info/verification.html";>Verifying Apache Software 
Foundation Releases</a>
+              for more information on why you should verify our releases.
+              </p>
+              <p>
+              The PGP signatures can be verified using PGP or GPG.
+              First download these <a 
href="http://www.apache.org/dist/portals/bridges/KEYS";>KEYS</a> as well as the 
asc signature file for the relevant distribution.
+              Make sure you get these files from the main distribution site, 
rather than from a mirror.
+              Then verify the signatures using
+              <source><![CDATA[  % pgpk -a KEYS
+  % pgpv downloaded_file.asc
+or
+  % pgp -ka KEYS
+  % pgp downloaded_file.asc
+or
+  % gpg --import KEYS
+  % gpg --verify downloaded_file.asc]]></source>
+              </p>
+              <p>
+              Alternatively, you can verify the MD5 signature on the files. A 
unix program called md5 or md5sum is included in many unix distributions.
+              It is also available as part of <a 
href="http://www.gnu.org/software/textutils/textutils.html";>GNU Textutils</a>.
+              Windows users can get binary md5 programs from <a 
href="http://www.fourmilab.ch/md5/";>here</a>,
+              <a 
href="http://www.pc-tools.net/win32/freeware/console/";>here</a>, or <a 
href="http://www.slavasoft.com/fsum/";>here</a>.
+              </p>
+            </subsection>
                </section>
 
        </body>


Reply via email to