[jira] [Resolved] (GEODE-7251) Incorrect/incomplete instructions on download page

2023-11-01 Thread Sebb (Jira)


 [ 
https://issues.apache.org/jira/browse/GEODE-7251?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Sebb resolved GEODE-7251.
-
Resolution: Fixed

Looks OK now

> Incorrect/incomplete instructions on download page
> --
>
> Key: GEODE-7251
> URL: https://issues.apache.org/jira/browse/GEODE-7251
> Project: Geode
>  Issue Type: Bug
>Reporter: Sebb
>Priority: Major
>
> There are some issues with the download page instructions.
> It still refers to checking MD5 hashes, but there are none.
> Also the gpg sig check needs a second parameter:
> gpg --verify ${filename}.tar.gz.asc ${filename}.tar.gz
> See https://www.apache.org/info/verification.html#specify_both



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Created] (GEODE-7645) Download page gpg example needs second parameter

2020-01-02 Thread Sebb (Jira)
Sebb created GEODE-7645:
---

 Summary: Download page gpg example needs second parameter
 Key: GEODE-7645
 URL: https://issues.apache.org/jira/browse/GEODE-7645
 Project: Geode
  Issue Type: Bug
Reporter: Sebb


It is important that the file being checked is also specified [1] on the gpg 
command line [2]

If the second paramater is omitted, gpg can report success without actually 
checking the main artifact. This should not happen on correctly constructed ASF 
downloads, as we only provide detached sigs, but we should not be documenting 
bad practise.

[1] https://www.apache.org/info/verification.html#specify_both

[2] https://geode.apache.org/releases/




--
This message was sent by Atlassian Jira
(v8.3.4#803005)


[jira] [Created] (GEODE-7644) Download page refers to MD5

2020-01-02 Thread Sebb (Jira)
Sebb created GEODE-7644:
---

 Summary: Download page refers to MD5
 Key: GEODE-7644
 URL: https://issues.apache.org/jira/browse/GEODE-7644
 Project: Geode
  Issue Type: Bug
Reporter: Sebb


The download page refers to validating MD5 hashes.
However, none are provided.

The page should instead explain how to check SHA hashes.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)


[jira] [Created] (GEODE-7251) Incorrect/incomplete instructions on download page

2019-09-26 Thread Sebb (Jira)
Sebb created GEODE-7251:
---

 Summary: Incorrect/incomplete instructions on download page
 Key: GEODE-7251
 URL: https://issues.apache.org/jira/browse/GEODE-7251
 Project: Geode
  Issue Type: Bug
Reporter: Sebb


There are some issues with the download page instructions.

It still refers to checking MD5 hashes, but there are none.

Also the gpg sig check needs a second parameter:

gpg --verify ${filename}.tar.gz.asc ${filename}.tar.gz

See https://www.apache.org/info/verification.html#specify_both



--
This message was sent by Atlassian Jira
(v8.3.4#803005)


[jira] [Created] (GEODE-6711) Please delete old releases from mirroring system

2019-04-25 Thread Sebb (JIRA)
Sebb created GEODE-6711:
---

 Summary: Please delete old releases from mirroring system
 Key: GEODE-6711
 URL: https://issues.apache.org/jira/browse/GEODE-6711
 Project: Geode
  Issue Type: Task
Reporter: Sebb


{color:#22}To reduce the load on the ASF mirrors, projects are required to 
delete old releases [1]{color}

{color:#22}Please can you remove all non-current releases?{color}

{color:#22}It's unfair to expect the 3rd party mirrors to carry old 
releases.{color}

{color:#22}However you can still link to the archives for historic 
releases.{color}

{color:#22}Please also update your release procedures (if relevant) to 
ensure superseded releases are archived once the new release has been published 
and announced.{color}

{color:#22}Thanks!{color}

{color:#22}[1] 
{color}[http://www.apache.org/dev/release.html#when-to-archive]



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Created] (GEODE-5030) Please delete old releases

2018-04-06 Thread Sebb (JIRA)
Sebb created GEODE-5030:
---

 Summary: Please delete old releases
 Key: GEODE-5030
 URL: https://issues.apache.org/jira/browse/GEODE-5030
 Project: Geode
  Issue Type: Task
Reporter: Sebb


To reduce the load on the ASF mirrors, projects are required to delete old 
releases [1]

Please can you remove all non-current releases?
It's unfair to expect the 3rd party mirrors to carry old releases.

Thanks!

[1] http://www.apache.org/dev/release.html#when-to-archive




--
This message was sent by Atlassian JIRA
(v7.6.3#76005)