cocoon-cvs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From ilgro...@apache.org
Subject svn commit: r1359699 - /cocoon/trunk/site/cocoon-main-site/src/site/xdoc/1284_1_1.xml
Date Tue, 10 Jul 2012 14:33:44 GMT
Author: ilgrosso
Date: Tue Jul 10 14:33:44 2012
New Revision: 1359699

URL: http://svn.apache.org/viewvc?rev=1359699&view=rev
Log:
Fixes COCOON-2273

Modified:
    cocoon/trunk/site/cocoon-main-site/src/site/xdoc/1284_1_1.xml

Modified: cocoon/trunk/site/cocoon-main-site/src/site/xdoc/1284_1_1.xml
URL: http://svn.apache.org/viewvc/cocoon/trunk/site/cocoon-main-site/src/site/xdoc/1284_1_1.xml?rev=1359699&r1=1359698&r2=1359699&view=diff
==============================================================================
--- cocoon/trunk/site/cocoon-main-site/src/site/xdoc/1284_1_1.xml (original)
+++ cocoon/trunk/site/cocoon-main-site/src/site/xdoc/1284_1_1.xml Tue Jul 10 14:33:44 2012
@@ -20,7 +20,9 @@
 2.2 and how to use it together with Maven 2 is the <a href="2.2/1159_1_1.html">Getting
 started tutorial</a>. If you follow that path, Maven 2 will take care of
 downloading all (transitive) dependencies.</p><p>However, there is also a <em>Getting
Started package</em> that contains a
-simple Cocoon 2.2 based application that uses Apache Ant as build system.</p><table
class="bodyTable">
+simple Cocoon 2.2 based application that uses Apache Ant as build system.</p>
+<p>It is good practice to <a href="#Verifying_Releases">verify the integrity</a>
of the distribution files.</p></div></div>
+<table class="bodyTable">
 <tbody>
 <tr class="a">
 <th>
@@ -53,14 +55,14 @@ cocoon-2.2.0.tar.gz</a></p>
 </td>
 <td>
 <p>
-<a href="http://www.apache.org/dyn/closer.cgi/cocoon/2.2/cocoon-2.2.0.zip.asc">pgp</a>
-<a href="http://www.apache.org/dyn/closer.cgi/cocoon/2.2/cocoon-2.2.0.zip.md5">md5</a>
-<a href="http://www.apache.org/dyn/closer.cgi/cocoon/2.2/cocoon-2.2.0.zip.sha1">sha1</a>
+<a href="http://www.apache.org/dist/cocoon/2.2/cocoon-2.2.0.zip.asc">pgp</a>
+<a href="http://www.apache.org/dist/cocoon/2.2/cocoon-2.2.0.zip.md5">md5</a>
+<a href="http://www.apache.org/dist/cocoon/2.2/cocoon-2.2.0.zip.sha1">sha1</a>
 <br/>
-<a href="http://www.apache.org/dyn/closer.cgi/cocoon/2.2/cocoon-2.2.0.tar.gz.asc">
+<a href="http://www.apache.org/dist/cocoon/2.2/cocoon-2.2.0.tar.gz.asc">
 pgp</a>
-<a href="http://www.apache.org/dyn/closer.cgi/cocoon/2.2/cocoon-2.2.0.tar.gz.md5">md5</a>
-<a href="http://www.apache.org/dyn/closer.cgi/cocoon/2.2/cocoon-2.2.0.tar.gz.sha1">sha1</a>
+<a href="http://www.apache.org/dist/cocoon/2.2/cocoon-2.2.0.tar.gz.md5">md5</a>
+<a href="http://www.apache.org/dist/cocoon/2.2/cocoon-2.2.0.tar.gz.sha1">sha1</a>
 </p>
 </td>
 </tr>
@@ -81,14 +83,14 @@ cocoon-getting-started-2.2.0.tar.gz</a><
 </td>
 <td>
 <p>
-<a href="http://www.apache.org/dyn/closer.cgi/cocoon/2.2/cocoon-getting-started/cocoon-getting-started-2.2.0.zip.asc">pgp</a>
-<a href="http://www.apache.org/dyn/closer.cgi/cocoon/2.2/cocoon-getting-started/cocoon-getting-started-2.2.0.zip.md5">md5</a>
-<a href="http://www.apache.org/dyn/closer.cgi/cocoon/2.2/cocoon-getting-started/cocoon-getting-started-2.2.0.zip.sha1">sha1</a>
+<a href="http://www.apache.org/dist/cocoon/2.2/cocoon-getting-started/cocoon-getting-started-2.2.0.zip.asc">pgp</a>
+<a href="http://www.apache.org/dist/cocoon/2.2/cocoon-getting-started/cocoon-getting-started-2.2.0.zip.md5">md5</a>
+<a href="http://www.apache.org/dist/cocoon/2.2/cocoon-getting-started/cocoon-getting-started-2.2.0.zip.sha1">sha1</a>
 <br/>
-<a href="http://www.apache.org/dyn/closer.cgi/cocoon/2.2/cocoon-getting-started/cocoon-getting-started-2.2.0.tar.gz.asc">
+<a href="http://www.apache.org/dist/cocoon/2.2/cocoon-getting-started/cocoon-getting-started-2.2.0.tar.gz.asc">
 pgp</a>
-<a href="http://www.apache.org/dyn/closer.cgi/cocoon/2.2/cocoon-getting-started/cocoon-getting-started-2.2.0.tar.gz.md5">md5</a>
-<a href="http://www.apache.org/dyn/closer.cgi/cocoon/2.2/cocoon-getting-started/cocoon-getting-started-2.2.0.tar.gz.sha1">sha1</a>
+<a href="http://www.apache.org/dist/cocoon/2.2/cocoon-getting-started/cocoon-getting-started-2.2.0.tar.gz.md5">md5</a>
+<a href="http://www.apache.org/dist/cocoon/2.2/cocoon-getting-started/cocoon-getting-started-2.2.0.tar.gz.sha1">sha1</a>
 </p>
 </td>
 </tr>
@@ -97,9 +99,50 @@ pgp</a>
 goes beyond what Cocoon provides in its core modules (Spring integration,
 sitemap and pipeline implementation) is provided as block. Blocks can be
 downloaded separately. In order to get an overview of what blocks are available,
-use the <a href="2.2/blocks/1204_1_1.html">list of blocks</a>.</p><section
name="Cocoon 2.1 (stable)" style="background:none;padding:0;"/><p>The latest stable
release of Cocoon 2.1.x  is 2.1.11.
+use the <a href="2.2/blocks/1204_1_1.html">list of blocks</a>.</p>
+<section name="Cocoon 2.1 (stable)" style="background:none;padding:0;"/><p>The
latest stable release of Cocoon 2.1.x  is 2.1.11.
 <a href="http://cocoon.apache.org/mirror.cgi">Downloads</a> and
 <a href="http://cocoon.apache.org/2.1/">documentation</a> are available.</p><section
name="Previous versions" style="background:none;padding:0;"/><p>Older versions of
Cocoon are <a href="2.0/">2.0</a> and
 <a href="1.x/">1.x</a>. It is not recommended to start a new project based on
-one of them.</p></div></div>
+one of them.</p>
+    <section name="Verifying Releases">
+      <p>We strongly recommend you verify the integrity of the downloaded files with
both PGP and MD5.</p>
+      
+      <p>The PGP signatures can be verified using <a href="http://www.pgpi.org/">PGP</a>
or 
+      <a href="http://www.gnupg.org/">GPG</a>. 
+      First download the <a href="http://www.apache.org/dist/cocoon/KEYS">KEYS</a>
as well as the 
+      <tt>*.asc</tt> signature file for the particular distribution. Make sure
you get these files from the main 
+      distribution directory, rather than from a mirror. Then verify the signatures using
one of the following sets of
+      commands:
+      
+        <source>$ pgpk -a KEYS
+$ pgpv cocoon-*.tar.gz.asc
+$ pgpv cocoon-*.zip.asc</source>
+        
+        <source>$ pgp -ka KEYS
+$ pgp cocoon-*.tar.gz.asc
+$ pgp cocoon-*.zip.asc</source>
+      
+        <source>$ gpg --import KEYS
+$ gpg --verify cocoon-*.tar.gz.asc
+$ gpg --verify cocoon-*.zip.asc</source>
+       </p>
+    <p>Alternatively, you can verify the MD5 signature on the files. A Unix/Linux program
called  
+      <code>md5</code> or 
+      <code>md5sum</code> is included in most distributions.  It is also available
as part of
+      <a href="http://www.gnu.org/software/textutils/textutils.html">GNU Textutils</a>.
+      Windows users can get binary md5 programs from these (and likely other) places:
+      <ul>
+        <li>
+          <a href="http://www.md5summer.org/">http://www.md5summer.org/</a>
+        </li>
+        <li>
+          <a href="http://www.fourmilab.ch/md5/">http://www.fourmilab.ch/md5/</a>
+        </li>
+        <li>
+          <a href="http://www.pc-tools.net/win32/md5sums/">http://www.pc-tools.net/win32/md5sums/</a>
+        </li>
+      </ul>
+    </p>
+    </section>
        </body></document>
\ No newline at end of file



Mime
View raw message