[
http://jira.codehaus.org/browse/MRM-1297?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Brett Porter updated MRM-1297:
------------------------------
Fix Version/s: 1.2.3
> Website download page does not provide link to KEYS file
> --------------------------------------------------------
>
> Key: MRM-1297
> URL: http://jira.codehaus.org/browse/MRM-1297
> Project: Archiva
> Issue Type: Bug
> Components: documentation
> Environment: http://archiva.apache.org/download.html
> Reporter: SebbASF
> Priority: Critical
> Fix For: 1.2.3
>
>
> The page http://archiva.apache.org/download.html does not include a link to
> the KEYS file, which should be located in:
> http://www.apache.org/dist/archiva/
> This means that it is all but impossible to verify any downloads, for
> example, for apache-archiva-1.2.2-docs.zip I get:
> gpg: Signature made 08/27/09 10:50:31 GMT Daylight Time using DSA key ID
> C625BAFB
> gpg: Can't check signature: No public key
> The key is at least available from the MIT server, but anyone can upload keys
> there.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira