Author: snagel Date: Mon Aug 13 09:29:48 2018 New Revision: 1837932 URL: http://svn.apache.org/viewvc?rev=1837932&view=rev Log: Replace MD5 signatures by SHA512 for recent releases (1.15 and 2.3.1) to match new Apache release signing policies
Modified: nutch/cms_site/trunk/content/downloads.md Modified: nutch/cms_site/trunk/content/downloads.md URL: http://svn.apache.org/viewvc/nutch/cms_site/trunk/content/downloads.md?rev=1837932&r1=1837931&r2=1837932&view=diff ============================================================================== --- nutch/cms_site/trunk/content/downloads.md (original) +++ nutch/cms_site/trunk/content/downloads.md Mon Aug 13 09:29:48 2018 @@ -39,8 +39,8 @@ href="https://www.apache.org/dyn/closer.lua/nutch/2.3.1/apache-nutch-2.3.1-src.tar.gz"> apache-nutch-2.3.1-src.tar.gz </a></td> <td colspan="1" rowspan="1"><a - href="https://apache.org/dist/nutch/2.3.1/apache-nutch-2.3.1-src.tar.gz.md5"> - apache-nutch-2.3.1-src.tar.gz.md5</a></td> + href="https://apache.org/dist/nutch/2.3.1/apache-nutch-2.3.1-src.tar.gz.sha512"> + apache-nutch-2.3.1-src.tar.gz.sha512</a></td> <td colspan="1" rowspan="1"><a href="https://apache.org/dist/nutch/2.3.1/apache-nutch-2.3.1-src.tar.gz.asc"> apache-nutch-2.3.1-src.tar.gz.asc</a></td> @@ -52,8 +52,8 @@ href="https://www.apache.org/dyn/closer.lua/nutch/2.3.1/apache-nutch-2.3.1-src.zip"> apache-nutch-2.3.1-src.zip</a></td> <td colspan="1" rowspan="1"><a - href="https://apache.org/dist/nutch/2.3.1/apache-nutch-2.3.1-src.zip.md5"> - apache-nutch-2.3.1-src.zip.md5</a></td> + href="https://apache.org/dist/nutch/2.3.1/apache-nutch-2.3.1-src.zip.sha512"> + apache-nutch-2.3.1-src.zip.sha512</a></td> <td colspan="1" rowspan="1"><a href="https://apache.org/dist/nutch/2.3.1/apache-nutch-2.3.1-src.zip.asc"> apache-nutch-2.3.1-src.zip.asc</a></td> @@ -65,8 +65,8 @@ href="https://www.apache.org/dyn/closer.lua/nutch/1.15/apache-nutch-1.15-src.tar.gz"> apache-nutch-1.15-src.tar.gz</a></td> <td colspan="1" rowspan="1"><a - href="https://apache.org/dist/nutch/1.15/apache-nutch-1.15-src.tar.gz.md5"> - apache-nutch-1.15-src.tar.gz.md5</a></td> + href="https://apache.org/dist/nutch/1.15/apache-nutch-1.15-src.tar.gz.sha512"> + apache-nutch-1.15-src.tar.gz.sha512</a></td> <td colspan="1" rowspan="1"><a href="https://apache.org/dist/nutch/1.15/apache-nutch-1.15-src.tar.gz.asc"> apache-nutch-1.15-src.tar.gz.asc</a></td> @@ -78,8 +78,8 @@ href="https://www.apache.org/dyn/closer.lua/nutch/1.15/apache-nutch-1.15-src.zip"> apache-nutch-1.15-src.zip</a></td> <td colspan="1" rowspan="1"><a - href="https://apache.org/dist/nutch/1.15/apache-nutch-1.15-src.zip.md5"> - apache-nutch-1.15-src.zip.md5</a></td> + href="https://apache.org/dist/nutch/1.15/apache-nutch-1.15-src.zip.sha512"> + apache-nutch-1.15-src.zip.sha512</a></td> <td colspan="1" rowspan="1"><a href="https://apache.org/dist/nutch/1.15/apache-nutch-1.15-src.zip.asc"> apache-nutch-1.15-src.zip.asc</a></td> @@ -91,8 +91,8 @@ href="https://www.apache.org/dyn/closer.lua/nutch/1.15/apache-nutch-1.15-bin.tar.gz"> apache-nutch-1.15-bin.tar.gz</a></td> <td colspan="1" rowspan="1"><a - href="https://apache.org/dist/nutch/1.15/apache-nutch-1.15-bin.tar.gz.md5"> - apache-nutch-1.15-bin.tar.gz.md5</a></td> + href="https://apache.org/dist/nutch/1.15/apache-nutch-1.15-bin.tar.gz.sha512"> + apache-nutch-1.15-bin.tar.gz.sha512</a></td> <td colspan="1" rowspan="1"><a href="https://apache.org/dist/nutch/1.15/apache-nutch-1.15-bin.tar.gz.asc"> apache-nutch-1.15-bin.tar.gz.asc</a></td> @@ -104,8 +104,8 @@ href="https://www.apache.org/dyn/closer.lua/nutch/1.15/apache-nutch-1.15-bin.zip"> apache-nutch-1.15-bin.zip</a></td> <td colspan="1" rowspan="1"><a - href="https://apache.org/dist/nutch/1.15/apache-nutch-1.15-bin.zip.md5"> - apache-nutch-1.15-bin.zip.md5</a></td> + href="https://apache.org/dist/nutch/1.15/apache-nutch-1.15-bin.zip.sha512"> + apache-nutch-1.15-bin.zip.sha512</a></td> <td colspan="1" rowspan="1"><a href="https://apache.org/dist/nutch/1.15/apache-nutch-1.15-bin.zip.asc"> apache-nutch-1.15-bin.zip.asc</a></td> @@ -119,13 +119,13 @@ <h1>Verify Releases</h1> <div class="section"> <p> - It is essential that you verify the integrity of the downloaded files using the PGP or MD5 signatures. Please read <a + It is essential that you verify the integrity of the downloaded files using the PGP or SHA signatures (MD5 for older releases). Please read <a href="https://httpd.apache.org/dev/verification.html">Verifying Apache HTTP Server Releases</a> for more information on why you - should verify our releases. We strongly recommend you verify your downloads with ASC, MD5 and SHA signatures. + should verify our releases. We strongly recommend you verify your downloads with ASC, SHA and MD5 signatures. </p> <h2>PGP Signature</h2> <p> - The PGP signatures can be verified using <code>PGP</code> or <code>MD5</code> First download the <a + The PGP signatures can be verified using <code>PGP</code> First download the <a href="https://www.apache.org/dist/nutch/KEYS">KEYS</a> as well as the <code>asc</code> signature file for the relevant distribution. Make sure you get these files from the <a href="https://www.apache.org/dist/nutch/">main distribution directory</a>, rather than from a mirror. Then verify the signatures using @@ -141,9 +141,12 @@ by Lewis John McGibbney (lewismc) 48BAEBF6.</p> <p>The files in Apache Nurch 1.15 releases are signed by Sebastian Nagel (snagel) DB0A9C6D.</p> + <h2>SHA Signature</h2> + <p>Additionally, you can verify the SHA signature on the files. A Unix program called shasum or sha512sum is included in many + Unix distributions.</p> + <pre>$ sha512sum --check apache-nutch-X.Y.Z</pre> <h2>MD5 Signature</h2> - <p>Alternatively, you can verify the MD5 signature on the files. A unix program called md5 or md5sum is included in many - unix distributions.</p> + <p>Older releases used the MD5 signature. You may use the Unix program md5 or md5sum to verify the MD5 signature:</p> <pre>$ md5sum apache-nutch-X.Y.Z</pre> <pre>... output should match the string in apache-nutch-X.Y.Z.md5</pre> </div>