Website download page does not provide link to KEYS file
--------------------------------------------------------
Key: MRM-1297
URL: http://jira.codehaus.org/browse/MRM-1297
Project: Archiva
Issue Type: Bug
Components: documentation
Environment: http://archiva.apache.org/download.html
Reporter: SebbASF
Priority: Critical
The page http://archiva.apache.org/download.html does not include a link to the
KEYS file, which should be located in:
http://www.apache.org/dist/archiva/
This means that it is all but impossible to verify any downloads, for example,
for apache-archiva-1.2.2-docs.zip I get:
gpg: Signature made 08/27/09 10:50:31 GMT Daylight Time using DSA key ID
C625BAFB
gpg: Can't check signature: No public key
The key is at least available from the MIT server, but anyone can upload keys
there.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
