https://issues.apache.org/ooo/show_bug.cgi?id=122905
Bug ID: 122905
Issue Type: DEFECT
Summary: Checksum page has several mistakes
Product: Infrastructure
Version: current
Hardware: All
OS: All
Status: CONFIRMED
Severity: normal
Priority: P3
Component: Website general issues
Assignee: [email protected]
Reporter: [email protected]
CC: [email protected]
The page http://www.openoffice.org/download/checksums.html has the title:
"How to verify downloads with checksum files?"
This is not strictly correct; .asc files are not checksums, they are (detached)
signatures.
In fact nor are MD5 and SHA1 - they are hashes.
It would be better to call the page
"How to verify downloads"
The page also says:
gpg.exe --import openoffice.asc
That is wrong; it is the KEYS file that needs to be imported.
gpg.exe --verify <ASC file>.asc <AOO file>.exe
is also wrong; gpg automatically strips the .asc to determine which file to
check.
It might be better to link to the ASF page at:
http://www.apache.org/dyn/closer.cgi#verify
--
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.
You are watching all bug changes.
