[ https://issues.apache.org/jira/browse/GORA-71?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13180080#comment-13180080 ]
Sebb commented on GORA-71: -------------------------- The hashes need to be linked from the ASF /dist server only - they are not mirrored. Although the sigs are mirrored, the links should still point to the ASF server, not the mirror. Only the archives should be linked to the mirror. > Download page does not include pointer to KEYS file or hashes > ------------------------------------------------------------- > > Key: GORA-71 > URL: https://issues.apache.org/jira/browse/GORA-71 > Project: Gora > Issue Type: Bug > Reporter: Sebb > Assignee: Lewis John McGibbney > Priority: Critical > > The download page includes a link to the archive and its gpg signatiure, but > there is no link to the KEYS file nor any links for hashes. > These must all be linked from ASF hosts. > Also, the download directory contains a zip archive, but this is not listed > on the download page. > The download page should also give information on how to check sigs and > hashes. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira