MD5 is not the PGP keys, its just a hash of the distribution. Our KEYS file is
located here:
http://www.apache.org/dist/click/KEYS
We have some instructions for importing KEYS and verification but it is
targeted at the release
manager, not the end user:
http://click.apache.org/docs/developer-guide/releasing.html (See Prerequisites)
On 2/06/2010 16:38, Adrian A. wrote:
>> On our download pages, we need to link to the KEYS files
> But we already do this. See the screenshot in attachment.
>
>> and provide instructions on how to verify a
>> download. Here is a good example:
>>
>> http://incubator.apache.org/photark/photark-downloads.html
> OK. I'll update the docs on how the users can verify the keys.
Great thanks.
Bob