No KEYS link on 1.1 download page

2006-06-27 Thread John Sisson
I noticed that the download page no longer has a KEYS link.  Yesterday 
(before the update to the site) the KEYS link at the very bottom of the 
download page pointed to http://people.apache.org/dist/geronimo/KEYS but 
it seems there is a more up-to-date version in 
http://www.apache.org/dist/geronimo/KEYS .


AFAIK, we should have the keys available so users can download it, as 
discussed in the Apache HTTP Server download page:

http://httpd.apache.org/download.cgi#verify

I am willing to update the download page so that it has a KEYS link, but 
can *someone confirm* which file it should be pointing to.


I can also add a Verify the integrity of the files section on the 
download page, based upon the 
http://httpd.apache.org/download.cgi#verify page to help those users who 
aren't familiar with the tools used to verify releases.


Would like some +1's before proceeding.

John


Re: No KEYS link on 1.1 download page

2006-06-27 Thread Matt Hogstrom
+1 John.  If you would do that it would be excellent.  The KEYS file is 
http://www.apache.org/dist/geronimo/KEYS.




John Sisson wrote:
I noticed that the download page no longer has a KEYS link.  Yesterday 
(before the update to the site) the KEYS link at the very bottom of the 
download page pointed to http://people.apache.org/dist/geronimo/KEYS but 
it seems there is a more up-to-date version in 
http://www.apache.org/dist/geronimo/KEYS .


AFAIK, we should have the keys available so users can download it, as 
discussed in the Apache HTTP Server download page:

http://httpd.apache.org/download.cgi#verify

I am willing to update the download page so that it has a KEYS link, but 
can *someone confirm* which file it should be pointing to.


I can also add a Verify the integrity of the files section on the 
download page, based upon the 
http://httpd.apache.org/download.cgi#verify page to help those users who 
aren't familiar with the tools used to verify releases.


Would like some +1's before proceeding.

John





Re: No KEYS link on 1.1 download page

2006-06-27 Thread David Blevins

+1

On Jun 27, 2006, at 3:31 PM, John Sisson wrote:

I noticed that the download page no longer has a KEYS link.   
Yesterday (before the update to the site) the KEYS link at the very  
bottom of the download page pointed to http://people.apache.org/ 
dist/geronimo/KEYS but it seems there is a more up-to-date version  
in http://www.apache.org/dist/geronimo/KEYS .


AFAIK, we should have the keys available so users can download it,  
as discussed in the Apache HTTP Server download page:

http://httpd.apache.org/download.cgi#verify

I am willing to update the download page so that it has a KEYS  
link, but can *someone confirm* which file it should be pointing to.


I can also add a Verify the integrity of the files section on the  
download page, based upon the http://httpd.apache.org/ 
download.cgi#verify page to help those users who aren't familiar  
with the tools used to verify releases.


Would like some +1's before proceeding.

John





Re: No KEYS link on 1.1 download page

2006-06-27 Thread Sachin Patel

+1

On Jun 27, 2006, at 6:48 PM, David Blevins wrote:


+1

On Jun 27, 2006, at 3:31 PM, John Sisson wrote:

I noticed that the download page no longer has a KEYS link.   
Yesterday (before the update to the site) the KEYS link at the  
very bottom of the download page pointed to http:// 
people.apache.org/dist/geronimo/KEYS but it seems there is a more  
up-to-date version in http://www.apache.org/dist/geronimo/KEYS .


AFAIK, we should have the keys available so users can download it,  
as discussed in the Apache HTTP Server download page:

http://httpd.apache.org/download.cgi#verify

I am willing to update the download page so that it has a KEYS  
link, but can *someone confirm* which file it should be pointing to.


I can also add a Verify the integrity of the files section on  
the download page, based upon the http://httpd.apache.org/ 
download.cgi#verify page to help those users who aren't familiar  
with the tools used to verify releases.


Would like some +1's before proceeding.

John






-sachin




Re: No KEYS link on 1.1 download page

2006-06-27 Thread John Sisson

Matt Hogstrom wrote:
+1 John.  If you would do that it would be excellent.  The KEYS file 
is http://www.apache.org/dist/geronimo/KEYS.




John Sisson wrote:
I noticed that the download page no longer has a KEYS link.  
Yesterday (before the update to the site) the KEYS link at the very 
bottom of the download page pointed to 
http://people.apache.org/dist/geronimo/KEYS but it seems there is a 
more up-to-date version in http://www.apache.org/dist/geronimo/KEYS .


AFAIK, we should have the keys available so users can download it, as 
discussed in the Apache HTTP Server download page:

http://httpd.apache.org/download.cgi#verify

I am willing to update the download page so that it has a KEYS link, 
but can *someone confirm* which file it should be pointing to.


I can also add a Verify the integrity of the files section on the 
download page, based upon the 
http://httpd.apache.org/download.cgi#verify page to help those users 
who aren't familiar with the tools used to verify releases.


Would like some +1's before proceeding.

John





I have committed these changes in rev 417662, but will hold off updating 
the site for a while to give time to people to review.  It is pretty 
much the same as the Apache HTTP server documentation, just updated to 
reference Geronimo filenames and Matt's public key in examples.  If 
anyone can help with the commented out section in verification.xml that 
would be great.


Thanks,
John