[
http://jira.codehaus.org/browse/MRM-1297?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=203337#action_203337
]
SebbASF commented on MRM-1297:
------------------------------
Seems to me this ought to be fixed for the current release, not postponed to
the next release.
> Website download page does not provide link to KEYS file
> --------------------------------------------------------
>
> Key: MRM-1297
> URL: http://jira.codehaus.org/browse/MRM-1297
> Project: Archiva
> Issue Type: Bug
> Components: documentation
> Environment: http://archiva.apache.org/download.html
> Reporter: SebbASF
> Priority: Critical
> Fix For: 1.2.3
>
>
> The page http://archiva.apache.org/download.html does not include a link to
> the KEYS file, which should be located in:
> http://www.apache.org/dist/archiva/
> This means that it is all but impossible to verify any downloads, for
> example, for apache-archiva-1.2.2-docs.zip I get:
> gpg: Signature made 08/27/09 10:50:31 GMT Daylight Time using DSA key ID
> C625BAFB
> gpg: Can't check signature: No public key
> The key is at least available from the MIT server, but anyone can upload keys
> there.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
