[
https://issues.apache.org/jira/browse/OAK-8157?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16810698#comment-16810698
]
Davide Giannella commented on OAK-8157:
---------------------------------------
we do some verification in the check-release as per following (at about L157)
{code:bash}
if [ ! -f "$BASEDIR/$RCDIR/$NAME.asc" ]; then
error " NOT FOUND: $NAME.asc"
elif gpg --verify "$BASEDIR/$RCDIR/$NAME.asc" 2>> "$LOGFILE" 1>&2; then
info " OK: $NAME.asc"
else
error " NOT OK: $NAME.asc"
fi
{code}
> Download page gpg example needs second parameter
> ------------------------------------------------
>
> Key: OAK-8157
> URL: https://issues.apache.org/jira/browse/OAK-8157
> Project: Jackrabbit Oak
> Issue Type: Improvement
> Reporter: Sebb
> Priority: Major
>
> The download page [2] says:
> {quote}gpg --verify jackrabbit-X.Y.Z-src.zip.asc{quote}
> This should read:
> gpg --verify jackrabbit-X.Y.Z-src.zip.asc jackrabbit-X.Y.Z-src.zip
> It is important that the file being checked is also specified [1] on the
> command line.
> [1] [https://www.apache.org/info/verification.html#specify_both]
> [2] https://jackrabbit.apache.org/jcr/downloads.html#verify
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
