deltaspike-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From build...@apache.org
Subject svn commit: r915970 - in /websites/staging/deltaspike/trunk/content: ./ download.html
Date Sat, 12 Jul 2014 19:50:53 GMT
Author: buildbot
Date: Sat Jul 12 19:50:53 2014
New Revision: 915970

Log:
Staging update by buildbot for deltaspike

Modified:
    websites/staging/deltaspike/trunk/content/   (props changed)
    websites/staging/deltaspike/trunk/content/download.html

Propchange: websites/staging/deltaspike/trunk/content/
------------------------------------------------------------------------------
--- cms:source-revision (original)
+++ cms:source-revision Sat Jul 12 19:50:53 2014
@@ -1 +1 @@
-1610027
+1610030

Modified: websites/staging/deltaspike/trunk/content/download.html
==============================================================================
--- websites/staging/deltaspike/trunk/content/download.html (original)
+++ websites/staging/deltaspike/trunk/content/download.html Sat Jul 12 19:50:53 2014
@@ -85,7 +85,7 @@
 <li><a href="#source-distribution">Source Distribution</a></li>
 <li><a href="#maven-dependencies">Maven Dependencies</a></li>
 <li><a href="#previous-releases">Previous Releases</a></li>
-<li><a href="#key-file">KEY-File</a></li>
+<li><a href="#verifying-releases">Verifying Releases</a></li>
 </ul>
 </div>
 <hr />
@@ -109,8 +109,33 @@
 <p>Details are available <a href="documentation.html#project-configuration-with-maven">here</a>.</p>
 <h1 id="previous-releases">Previous Releases</h1>
 <p>See <a href="http://archive.apache.org/dist/deltaspike/" target="_blank">Release-Archive</a></p>
-<h1 id="key-file">KEY-File</h1>
-<p>See <a href="https://git-wip-us.apache.org/repos/asf?p=deltaspike.git;a=blob_plain;f=keys/KEYS;h=6cb2559835ca809d1eb24bbdae56bd49695b93bd;hb=015dbba89afeb9bc763da72302587695d41af7e7"
target="_blank">KEYS</a></p>
+<h1 id="verifying-releases">Verifying Releases</h1>
+<p>It is essential that you verify the integrity of any downloaded files using
+the PGP or MD5 signatures.  For more information on signing artifacts and
+why we do it, check out the
+<a href="http://www.apache.org/dev/release-signing.html">Release Signing FAQ</a>.</p>
+<p>The PGP signatures can be verified using PGP or GPG. First download the <a href="http://www.apache.org/dist/deltaspike/KEYS">KEYS</a>
+as well as the asc signature file for the artifact. Make sure you get
+these files from the
+<a href="http://www.apache.org/dist/deltaspike/">main distribution directory</a>,
+rather than from a
+<a href="http://www.apache.org/dyn/closer.cgi/deltaspike/">mirror</a>.
+Then verify the signatures using e.g.:</p>
+<div class="codehilite"><pre><span class="nv">$ </span>pgpk -a KEYS
+<span class="nv">$ </span>pgpv deltaspike-project-1.0.0-source-release.zip.asc
+</pre></div>
+
+
+<p>or</p>
+<div class="codehilite"><pre><span class="nv">$ </span>pgp -ka KEYS
+<span class="nv">$ </span>pgp deltaspike-project-1.0.0-source-release.zip.asc
+</pre></div>
+
+
+<p>or</p>
+<div class="codehilite"><pre><span class="nv">$ </span>gpg --import
KEYS
+<span class="nv">$ </span>gpg --verify deltaspike-project-1.0.0-source-release.zip.asc
+</pre></div>
           </div>
       </div>
 



Mime
View raw message