[
https://issues.apache.org/jira/browse/OAK-8157?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16810767#comment-16810767
]
Alex Deparvu commented on OAK-8157:
-----------------------------------
right, I was talking about the need to specify both files as mentioned on the
asf page [1] above:
bq. N.B. you must specify both the detached signature and the release file.
we don't seem to do it.
> Download page gpg example needs second parameter
> ------------------------------------------------
>
> Key: OAK-8157
> URL: https://issues.apache.org/jira/browse/OAK-8157
> Project: Jackrabbit Oak
> Issue Type: Improvement
> Reporter: Sebb
> Priority: Major
>
> The download page [2] says:
> {quote}gpg --verify jackrabbit-X.Y.Z-src.zip.asc{quote}
> This should read:
> gpg --verify jackrabbit-X.Y.Z-src.zip.asc jackrabbit-X.Y.Z-src.zip
> It is important that the file being checked is also specified [1] on the
> command line.
> [1] [https://www.apache.org/info/verification.html#specify_both]
> [2] https://jackrabbit.apache.org/jcr/downloads.html#verify
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
