incubator-cvs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From rdon...@apache.org
Subject svn commit: r611636 - in /incubator/public/trunk: site-author/guides/releasemanagement.xml site-publish/guides/releasemanagement.html
Date Sun, 13 Jan 2008 20:37:01 GMT
Author: rdonkin
Date: Sun Jan 13 12:37:01 2008
New Revision: 611636

URL: http://svn.apache.org/viewvc?rev=611636&view=rev
Log:
Rephrased content in response to questions.

Modified:
    incubator/public/trunk/site-author/guides/releasemanagement.xml
    incubator/public/trunk/site-publish/guides/releasemanagement.html

Modified: incubator/public/trunk/site-author/guides/releasemanagement.xml
URL: http://svn.apache.org/viewvc/incubator/public/trunk/site-author/guides/releasemanagement.xml?rev=611636&r1=611635&r2=611636&view=diff
==============================================================================
--- incubator/public/trunk/site-author/guides/releasemanagement.xml (original)
+++ incubator/public/trunk/site-author/guides/releasemanagement.xml Sun Jan 13 12:37:01 2008
@@ -243,13 +243,14 @@
           In particular, a <a href='http://www.apache.org/dev/release-download-pages.html'>script</a>

           must be used to direct the download to an appropriate URL. 
           </p><p>
-          The artifacts 
-          are downloaded from machines outside Apache control so users must verify them.
-          While the mirrored release artifacts (gzipped tar files and zip jar files are
-          the most common artifacts) must be used, the mirrored checksums, <code>KEYS</code>

-          and signature files (<code>.asc</code> and <code>.md5</code>
files) must 
-          <strong>never</strong> be used. All links must refer to the original
documents
-          on <code>www.apache.org</code>.
+          Users will download the mirrored release artifacts from machines outside Apache
control.
+          Users need to verify that the copy downloaded is identical to the original.
+          Mirrored copies of checksums, <code>KEYS</code> and signature files

+          (<code>.asc</code> and <code>.md5</code> files) will be
present on the
+          mirrors but must <strong>never</strong> be used for verification. So,
all links 
+          from the podling website to signatures, sums and <code>KEYS</code>
need to refer 
+          to the original documents on <code>www.apache.org</code>.
+          See <a href='http://www.apache.org/dev/release-signing.html'>release signing
guide</a> for more information.
           </p>
         </section>
         <section id='understanding-archiving'><title>Archiving</title>

Modified: incubator/public/trunk/site-publish/guides/releasemanagement.html
URL: http://svn.apache.org/viewvc/incubator/public/trunk/site-publish/guides/releasemanagement.html?rev=611636&r1=611635&r2=611636&view=diff
==============================================================================
--- incubator/public/trunk/site-publish/guides/releasemanagement.html (original)
+++ incubator/public/trunk/site-publish/guides/releasemanagement.html Sun Jan 13 12:37:01
2008
@@ -817,13 +817,14 @@
           must be used to direct the download to an appropriate URL. 
           </p>
 <p>
-          The artifacts 
-          are downloaded from machines outside Apache control so users must verify them.
-          While the mirrored release artifacts (gzipped tar files and zip jar files are
-          the most common artifacts) must be used, the mirrored checksums, <code>KEYS</code>

-          and signature files (<code>.asc</code> and <code>.md5</code>
files) must 
-          <strong>never</strong> be used. All links must refer to the original
documents
-          on <code>www.apache.org</code>.
+          Users will download the mirrored release artifacts from machines outside Apache
control.
+          Users need to verify that the copy downloaded is identical to the original.
+          Mirrored copies of checksums, <code>KEYS</code> and signature files

+          (<code>.asc</code> and <code>.md5</code> files) will be
present on the
+          mirrors but must <strong>never</strong> be used for verification. So,
all links 
+          from the podling website to signatures, sums and <code>KEYS</code>
need to refer 
+          to the original documents on <code>www.apache.org</code>.
+          See <a href="http://www.apache.org/dev/release-signing.html">release signing
guide</a> for more information.
           </p>
 </div>
 <h4>



---------------------------------------------------------------------
To unsubscribe, e-mail: cvs-unsubscribe@incubator.apache.org
For additional commands, e-mail: cvs-help@incubator.apache.org


Mime
View raw message