jakarta-site-cvs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From s...@apache.org
Subject svn commit: r673111 - in /jakarta/site: docs/site/downloads/ xdocs/downloads/
Date Tue, 01 Jul 2008 15:57:23 GMT
Author: sebb
Date: Tue Jul  1 08:57:22 2008
New Revision: 673111

URL: http://svn.apache.org/viewvc?rev=673111&view=rev
Log:
Add download verification details

Modified:
    jakarta/site/docs/site/downloads/downloads_bcel.html
    jakarta/site/docs/site/downloads/downloads_bsf.html
    jakarta/site/docs/site/downloads/downloads_cactus.html
    jakarta/site/docs/site/downloads/downloads_ecs.html
    jakarta/site/docs/site/downloads/downloads_jcs.html
    jakarta/site/docs/site/downloads/downloads_jmeter.html
    jakarta/site/docs/site/downloads/downloads_oro.html
    jakarta/site/docs/site/downloads/downloads_regexp.html
    jakarta/site/docs/site/downloads/downloads_taglibs-application.html
    jakarta/site/docs/site/downloads/downloads_taglibs-benchmark.html
    jakarta/site/docs/site/downloads/downloads_taglibs-datetime.html
    jakarta/site/docs/site/downloads/downloads_taglibs-dbtags.html
    jakarta/site/docs/site/downloads/downloads_taglibs-log.html
    jakarta/site/docs/site/downloads/downloads_taglibs-mailer.html
    jakarta/site/docs/site/downloads/downloads_taglibs-page.html
    jakarta/site/docs/site/downloads/downloads_taglibs-random.html
    jakarta/site/docs/site/downloads/downloads_taglibs-rdc.html
    jakarta/site/docs/site/downloads/downloads_taglibs-regexp.html
    jakarta/site/docs/site/downloads/downloads_taglibs-request.html
    jakarta/site/docs/site/downloads/downloads_taglibs-response.html
    jakarta/site/docs/site/downloads/downloads_taglibs-session.html
    jakarta/site/docs/site/downloads/downloads_taglibs-standard-1.0.html
    jakarta/site/docs/site/downloads/downloads_taglibs-standard.html
    jakarta/site/docs/site/downloads/downloads_taglibs-string.html
    jakarta/site/docs/site/downloads/downloads_taglibs-xsl.html
    jakarta/site/docs/site/downloads/downloads_taglibs.html
    jakarta/site/xdocs/downloads/download-pages.xsl

Modified: jakarta/site/docs/site/downloads/downloads_bcel.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_bcel.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_bcel.html (original)
+++ jakarta/site/docs/site/downloads/downloads_bcel.html Tue Jul  1 08:57:22 2008
@@ -251,6 +251,40 @@
 <a href="http://archive.apache.org/dist/jakarta/bcel/">archives...</a>
 </li>
 </ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+		files using the PGP or MD5 signatures.  Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+		more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG.  First
+		download the <code>KEYS</code>
+		as well as the <code>asc</code> signature file for the relevant
+		distribution.  
+		Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+		using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files.  A
+		unix program called <code>md5</code> or <code>md5sum</code> is
+		included in many unix distributions.  It is also available as part of
+		<a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+		Textutils</a>.  Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+		<a href="http://www.slavasoft.com/fsum/">here</a>.</p>
 </div>
 </p>
 </div>

Modified: jakarta/site/docs/site/downloads/downloads_bsf.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_bsf.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_bsf.html (original)
+++ jakarta/site/docs/site/downloads/downloads_bsf.html Tue Jul  1 08:57:22 2008
@@ -287,6 +287,40 @@
 <a href="http://archive.apache.org/dist/jakarta/bsf/">archives...</a>
 </li>
 </ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+		files using the PGP or MD5 signatures.  Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+		more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG.  First
+		download the <code>KEYS</code>
+		as well as the <code>asc</code> signature file for the relevant
+		distribution.  
+		Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+		using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files.  A
+		unix program called <code>md5</code> or <code>md5sum</code> is
+		included in many unix distributions.  It is also available as part of
+		<a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+		Textutils</a>.  Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+		<a href="http://www.slavasoft.com/fsum/">here</a>.</p>
 </div>
 </p>
 </div>

Modified: jakarta/site/docs/site/downloads/downloads_cactus.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_cactus.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_cactus.html (original)
+++ jakarta/site/docs/site/downloads/downloads_cactus.html Tue Jul  1 08:57:22 2008
@@ -267,6 +267,40 @@
 <a href="http://archive.apache.org/dist/jakarta/cactus/">archives...</a>
 </li>
 </ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+		files using the PGP or MD5 signatures.  Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+		more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG.  First
+		download the <code>KEYS</code>
+		as well as the <code>asc</code> signature file for the relevant
+		distribution.  
+		Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+		using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files.  A
+		unix program called <code>md5</code> or <code>md5sum</code> is
+		included in many unix distributions.  It is also available as part of
+		<a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+		Textutils</a>.  Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+		<a href="http://www.slavasoft.com/fsum/">here</a>.</p>
 </div>
 </p>
 </div>

Modified: jakarta/site/docs/site/downloads/downloads_ecs.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_ecs.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_ecs.html (original)
+++ jakarta/site/docs/site/downloads/downloads_ecs.html Tue Jul  1 08:57:22 2008
@@ -251,6 +251,40 @@
 <a href="http://archive.apache.org/dist/jakarta/ecs/">archives...</a>
 </li>
 </ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+		files using the PGP or MD5 signatures.  Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+		more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG.  First
+		download the <code>KEYS</code>
+		as well as the <code>asc</code> signature file for the relevant
+		distribution.  
+		Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+		using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files.  A
+		unix program called <code>md5</code> or <code>md5sum</code> is
+		included in many unix distributions.  It is also available as part of
+		<a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+		Textutils</a>.  Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+		<a href="http://www.slavasoft.com/fsum/">here</a>.</p>
 </div>
 </p>
 </div>

Modified: jakarta/site/docs/site/downloads/downloads_jcs.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_jcs.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_jcs.html (original)
+++ jakarta/site/docs/site/downloads/downloads_jcs.html Tue Jul  1 08:57:22 2008
@@ -245,6 +245,40 @@
 </ul>
 </li>
 </ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+		files using the PGP or MD5 signatures.  Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+		more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG.  First
+		download the <code>KEYS</code>
+		as well as the <code>asc</code> signature file for the relevant
+		distribution.  
+		Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+		using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files.  A
+		unix program called <code>md5</code> or <code>md5sum</code> is
+		included in many unix distributions.  It is also available as part of
+		<a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+		Textutils</a>.  Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+		<a href="http://www.slavasoft.com/fsum/">here</a>.</p>
 </div>
 </p>
 </div>

Modified: jakarta/site/docs/site/downloads/downloads_jmeter.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_jmeter.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_jmeter.html (original)
+++ jakarta/site/docs/site/downloads/downloads_jmeter.html Tue Jul  1 08:57:22 2008
@@ -251,6 +251,40 @@
 <a href="http://archive.apache.org/dist/jakarta/jmeter/">archives...</a>
 </li>
 </ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+		files using the PGP or MD5 signatures.  Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+		more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG.  First
+		download the <code>KEYS</code>
+		as well as the <code>asc</code> signature file for the relevant
+		distribution.  
+		Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+		using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files.  A
+		unix program called <code>md5</code> or <code>md5sum</code> is
+		included in many unix distributions.  It is also available as part of
+		<a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+		Textutils</a>.  Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+		<a href="http://www.slavasoft.com/fsum/">here</a>.</p>
 </div>
 </p>
 </div>

Modified: jakarta/site/docs/site/downloads/downloads_oro.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_oro.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_oro.html (original)
+++ jakarta/site/docs/site/downloads/downloads_oro.html Tue Jul  1 08:57:22 2008
@@ -251,6 +251,40 @@
 <a href="http://archive.apache.org/dist/jakarta/oro/">archives...</a>
 </li>
 </ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+		files using the PGP or MD5 signatures.  Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+		more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG.  First
+		download the <code>KEYS</code>
+		as well as the <code>asc</code> signature file for the relevant
+		distribution.  
+		Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+		using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files.  A
+		unix program called <code>md5</code> or <code>md5sum</code> is
+		included in many unix distributions.  It is also available as part of
+		<a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+		Textutils</a>.  Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+		<a href="http://www.slavasoft.com/fsum/">here</a>.</p>
 </div>
 </p>
 </div>

Modified: jakarta/site/docs/site/downloads/downloads_regexp.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_regexp.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_regexp.html (original)
+++ jakarta/site/docs/site/downloads/downloads_regexp.html Tue Jul  1 08:57:22 2008
@@ -226,6 +226,40 @@
 <a href="http://archive.apache.org/dist/jakarta/regexp/">archives...</a>
 </li>
 </ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+		files using the PGP or MD5 signatures.  Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+		more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG.  First
+		download the <code>KEYS</code>
+		as well as the <code>asc</code> signature file for the relevant
+		distribution.  
+		Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+		using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files.  A
+		unix program called <code>md5</code> or <code>md5sum</code> is
+		included in many unix distributions.  It is also available as part of
+		<a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+		Textutils</a>.  Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+		<a href="http://www.slavasoft.com/fsum/">here</a>.</p>
 </div>
 </p>
 </div>

Modified: jakarta/site/docs/site/downloads/downloads_taglibs-application.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-application.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-application.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-application.html Tue Jul  1 08:57:22 2008
@@ -212,6 +212,40 @@
 <a href="http://archive.apache.org/dist/jakarta/taglibs/application/">archives...</a>
 </li>
 </ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+		files using the PGP or MD5 signatures.  Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+		more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG.  First
+		download the <code>KEYS</code>
+		as well as the <code>asc</code> signature file for the relevant
+		distribution.  
+		Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+		using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files.  A
+		unix program called <code>md5</code> or <code>md5sum</code> is
+		included in many unix distributions.  It is also available as part of
+		<a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+		Textutils</a>.  Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+		<a href="http://www.slavasoft.com/fsum/">here</a>.</p>
 </div>
 </p>
 </div>

Modified: jakarta/site/docs/site/downloads/downloads_taglibs-benchmark.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-benchmark.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-benchmark.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-benchmark.html Tue Jul  1 08:57:22 2008
@@ -212,6 +212,40 @@
 <a href="http://archive.apache.org/dist/jakarta/taglibs/benchmark/">archives...</a>
 </li>
 </ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+		files using the PGP or MD5 signatures.  Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+		more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG.  First
+		download the <code>KEYS</code>
+		as well as the <code>asc</code> signature file for the relevant
+		distribution.  
+		Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+		using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files.  A
+		unix program called <code>md5</code> or <code>md5sum</code> is
+		included in many unix distributions.  It is also available as part of
+		<a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+		Textutils</a>.  Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+		<a href="http://www.slavasoft.com/fsum/">here</a>.</p>
 </div>
 </p>
 </div>

Modified: jakarta/site/docs/site/downloads/downloads_taglibs-datetime.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-datetime.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-datetime.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-datetime.html Tue Jul  1 08:57:22 2008
@@ -212,6 +212,40 @@
 <a href="http://archive.apache.org/dist/jakarta/taglibs/datetime/">archives...</a>
 </li>
 </ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+		files using the PGP or MD5 signatures.  Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+		more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG.  First
+		download the <code>KEYS</code>
+		as well as the <code>asc</code> signature file for the relevant
+		distribution.  
+		Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+		using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files.  A
+		unix program called <code>md5</code> or <code>md5sum</code> is
+		included in many unix distributions.  It is also available as part of
+		<a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+		Textutils</a>.  Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+		<a href="http://www.slavasoft.com/fsum/">here</a>.</p>
 </div>
 </p>
 </div>

Modified: jakarta/site/docs/site/downloads/downloads_taglibs-dbtags.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-dbtags.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-dbtags.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-dbtags.html Tue Jul  1 08:57:22 2008
@@ -212,6 +212,40 @@
 <a href="http://archive.apache.org/dist/jakarta/taglibs/dbtags/">archives...</a>
 </li>
 </ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+		files using the PGP or MD5 signatures.  Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+		more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG.  First
+		download the <code>KEYS</code>
+		as well as the <code>asc</code> signature file for the relevant
+		distribution.  
+		Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+		using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files.  A
+		unix program called <code>md5</code> or <code>md5sum</code> is
+		included in many unix distributions.  It is also available as part of
+		<a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+		Textutils</a>.  Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+		<a href="http://www.slavasoft.com/fsum/">here</a>.</p>
 </div>
 </p>
 </div>

Modified: jakarta/site/docs/site/downloads/downloads_taglibs-log.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-log.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-log.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-log.html Tue Jul  1 08:57:22 2008
@@ -212,6 +212,40 @@
 <a href="http://archive.apache.org/dist/jakarta/taglibs/log/">archives...</a>
 </li>
 </ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+		files using the PGP or MD5 signatures.  Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+		more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG.  First
+		download the <code>KEYS</code>
+		as well as the <code>asc</code> signature file for the relevant
+		distribution.  
+		Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+		using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files.  A
+		unix program called <code>md5</code> or <code>md5sum</code> is
+		included in many unix distributions.  It is also available as part of
+		<a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+		Textutils</a>.  Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+		<a href="http://www.slavasoft.com/fsum/">here</a>.</p>
 </div>
 </p>
 </div>

Modified: jakarta/site/docs/site/downloads/downloads_taglibs-mailer.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-mailer.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-mailer.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-mailer.html Tue Jul  1 08:57:22 2008
@@ -212,6 +212,40 @@
 <a href="http://archive.apache.org/dist/jakarta/taglibs/mailer/">archives...</a>
 </li>
 </ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+		files using the PGP or MD5 signatures.  Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+		more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG.  First
+		download the <code>KEYS</code>
+		as well as the <code>asc</code> signature file for the relevant
+		distribution.  
+		Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+		using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files.  A
+		unix program called <code>md5</code> or <code>md5sum</code> is
+		included in many unix distributions.  It is also available as part of
+		<a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+		Textutils</a>.  Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+		<a href="http://www.slavasoft.com/fsum/">here</a>.</p>
 </div>
 </p>
 </div>

Modified: jakarta/site/docs/site/downloads/downloads_taglibs-page.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-page.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-page.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-page.html Tue Jul  1 08:57:22 2008
@@ -212,6 +212,40 @@
 <a href="http://archive.apache.org/dist/jakarta/taglibs/page/">archives...</a>
 </li>
 </ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+		files using the PGP or MD5 signatures.  Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+		more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG.  First
+		download the <code>KEYS</code>
+		as well as the <code>asc</code> signature file for the relevant
+		distribution.  
+		Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+		using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files.  A
+		unix program called <code>md5</code> or <code>md5sum</code> is
+		included in many unix distributions.  It is also available as part of
+		<a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+		Textutils</a>.  Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+		<a href="http://www.slavasoft.com/fsum/">here</a>.</p>
 </div>
 </p>
 </div>

Modified: jakarta/site/docs/site/downloads/downloads_taglibs-random.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-random.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-random.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-random.html Tue Jul  1 08:57:22 2008
@@ -212,6 +212,40 @@
 <a href="http://archive.apache.org/dist/jakarta/taglibs/random/">archives...</a>
 </li>
 </ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+		files using the PGP or MD5 signatures.  Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+		more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG.  First
+		download the <code>KEYS</code>
+		as well as the <code>asc</code> signature file for the relevant
+		distribution.  
+		Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+		using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files.  A
+		unix program called <code>md5</code> or <code>md5sum</code> is
+		included in many unix distributions.  It is also available as part of
+		<a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+		Textutils</a>.  Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+		<a href="http://www.slavasoft.com/fsum/">here</a>.</p>
 </div>
 </p>
 </div>

Modified: jakarta/site/docs/site/downloads/downloads_taglibs-rdc.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-rdc.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-rdc.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-rdc.html Tue Jul  1 08:57:22 2008
@@ -246,6 +246,40 @@
 <a href="http://archive.apache.org/dist/jakarta/taglibs/rdc/">archives...</a>
 </li>
 </ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+		files using the PGP or MD5 signatures.  Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+		more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG.  First
+		download the <code>KEYS</code>
+		as well as the <code>asc</code> signature file for the relevant
+		distribution.  
+		Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+		using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files.  A
+		unix program called <code>md5</code> or <code>md5sum</code> is
+		included in many unix distributions.  It is also available as part of
+		<a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+		Textutils</a>.  Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+		<a href="http://www.slavasoft.com/fsum/">here</a>.</p>
 </div>
 </p>
 </div>

Modified: jakarta/site/docs/site/downloads/downloads_taglibs-regexp.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-regexp.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-regexp.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-regexp.html Tue Jul  1 08:57:22 2008
@@ -212,6 +212,40 @@
 <a href="http://archive.apache.org/dist/jakarta/taglibs/regexp/">archives...</a>
 </li>
 </ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+		files using the PGP or MD5 signatures.  Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+		more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG.  First
+		download the <code>KEYS</code>
+		as well as the <code>asc</code> signature file for the relevant
+		distribution.  
+		Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+		using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files.  A
+		unix program called <code>md5</code> or <code>md5sum</code> is
+		included in many unix distributions.  It is also available as part of
+		<a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+		Textutils</a>.  Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+		<a href="http://www.slavasoft.com/fsum/">here</a>.</p>
 </div>
 </p>
 </div>

Modified: jakarta/site/docs/site/downloads/downloads_taglibs-request.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-request.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-request.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-request.html Tue Jul  1 08:57:22 2008
@@ -212,6 +212,40 @@
 <a href="http://archive.apache.org/dist/jakarta/taglibs/request/">archives...</a>
 </li>
 </ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+		files using the PGP or MD5 signatures.  Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+		more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG.  First
+		download the <code>KEYS</code>
+		as well as the <code>asc</code> signature file for the relevant
+		distribution.  
+		Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+		using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files.  A
+		unix program called <code>md5</code> or <code>md5sum</code> is
+		included in many unix distributions.  It is also available as part of
+		<a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+		Textutils</a>.  Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+		<a href="http://www.slavasoft.com/fsum/">here</a>.</p>
 </div>
 </p>
 </div>

Modified: jakarta/site/docs/site/downloads/downloads_taglibs-response.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-response.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-response.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-response.html Tue Jul  1 08:57:22 2008
@@ -212,6 +212,40 @@
 <a href="http://archive.apache.org/dist/jakarta/taglibs/response/">archives...</a>
 </li>
 </ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+		files using the PGP or MD5 signatures.  Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+		more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG.  First
+		download the <code>KEYS</code>
+		as well as the <code>asc</code> signature file for the relevant
+		distribution.  
+		Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+		using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files.  A
+		unix program called <code>md5</code> or <code>md5sum</code> is
+		included in many unix distributions.  It is also available as part of
+		<a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+		Textutils</a>.  Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+		<a href="http://www.slavasoft.com/fsum/">here</a>.</p>
 </div>
 </p>
 </div>

Modified: jakarta/site/docs/site/downloads/downloads_taglibs-session.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-session.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-session.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-session.html Tue Jul  1 08:57:22 2008
@@ -212,6 +212,40 @@
 <a href="http://archive.apache.org/dist/jakarta/taglibs/session/">archives...</a>
 </li>
 </ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+		files using the PGP or MD5 signatures.  Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+		more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG.  First
+		download the <code>KEYS</code>
+		as well as the <code>asc</code> signature file for the relevant
+		distribution.  
+		Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+		using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files.  A
+		unix program called <code>md5</code> or <code>md5sum</code> is
+		included in many unix distributions.  It is also available as part of
+		<a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+		Textutils</a>.  Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+		<a href="http://www.slavasoft.com/fsum/">here</a>.</p>
 </div>
 </p>
 </div>

Modified: jakarta/site/docs/site/downloads/downloads_taglibs-standard-1.0.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-standard-1.0.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-standard-1.0.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-standard-1.0.html Tue Jul  1 08:57:22 2008
@@ -258,6 +258,40 @@
 <a href="http://archive.apache.org/dist/jakarta/taglibs/standard-1.0/">archives...</a>
 </li>
 </ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+		files using the PGP or MD5 signatures.  Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+		more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG.  First
+		download the <code>KEYS</code>
+		as well as the <code>asc</code> signature file for the relevant
+		distribution.  
+		Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+		using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files.  A
+		unix program called <code>md5</code> or <code>md5sum</code> is
+		included in many unix distributions.  It is also available as part of
+		<a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+		Textutils</a>.  Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+		<a href="http://www.slavasoft.com/fsum/">here</a>.</p>
 </div>
 </p>
 </div>

Modified: jakarta/site/docs/site/downloads/downloads_taglibs-standard.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-standard.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-standard.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-standard.html Tue Jul  1 08:57:22 2008
@@ -242,6 +242,40 @@
 <a href="http://archive.apache.org/dist/jakarta/taglibs/standard/">archives...</a>
 </li>
 </ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+		files using the PGP or MD5 signatures.  Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+		more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG.  First
+		download the <code>KEYS</code>
+		as well as the <code>asc</code> signature file for the relevant
+		distribution.  
+		Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+		using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files.  A
+		unix program called <code>md5</code> or <code>md5sum</code> is
+		included in many unix distributions.  It is also available as part of
+		<a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+		Textutils</a>.  Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+		<a href="http://www.slavasoft.com/fsum/">here</a>.</p>
 </div>
 </p>
 </div>

Modified: jakarta/site/docs/site/downloads/downloads_taglibs-string.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-string.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-string.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-string.html Tue Jul  1 08:57:22 2008
@@ -212,6 +212,40 @@
 <a href="http://archive.apache.org/dist/jakarta/taglibs/string/">archives...</a>
 </li>
 </ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+		files using the PGP or MD5 signatures.  Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+		more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG.  First
+		download the <code>KEYS</code>
+		as well as the <code>asc</code> signature file for the relevant
+		distribution.  
+		Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+		using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files.  A
+		unix program called <code>md5</code> or <code>md5sum</code> is
+		included in many unix distributions.  It is also available as part of
+		<a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+		Textutils</a>.  Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+		<a href="http://www.slavasoft.com/fsum/">here</a>.</p>
 </div>
 </p>
 </div>

Modified: jakarta/site/docs/site/downloads/downloads_taglibs-xsl.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs-xsl.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs-xsl.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs-xsl.html Tue Jul  1 08:57:22 2008
@@ -212,6 +212,40 @@
 <a href="http://archive.apache.org/dist/jakarta/taglibs/xsl/">archives...</a>
 </li>
 </ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+		files using the PGP or MD5 signatures.  Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+		more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG.  First
+		download the <code>KEYS</code>
+		as well as the <code>asc</code> signature file for the relevant
+		distribution.  
+		Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+		using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files.  A
+		unix program called <code>md5</code> or <code>md5sum</code> is
+		included in many unix distributions.  It is also available as part of
+		<a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+		Textutils</a>.  Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+		<a href="http://www.slavasoft.com/fsum/">here</a>.</p>
 </div>
 </p>
 </div>

Modified: jakarta/site/docs/site/downloads/downloads_taglibs.html
URL: http://svn.apache.org/viewvc/jakarta/site/docs/site/downloads/downloads_taglibs.html?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/docs/site/downloads/downloads_taglibs.html (original)
+++ jakarta/site/docs/site/downloads/downloads_taglibs.html Tue Jul  1 08:57:22 2008
@@ -209,6 +209,40 @@
 <a href="downloads_taglibs-xsl.cgi">XSL Taglib</a>
 </li>
 </ul>
+<h3>Verification of downloads</h3>
+<p>It is essential that you verify the integrity of the downloaded
+		files using the PGP or MD5 signatures.  Please read <a href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+		more information on why you should verify our releases.</p>
+<p>The PGP signatures can be verified using PGP or GPG.  First
+		download the <code>KEYS</code>
+		as well as the <code>asc</code> signature file for the relevant
+		distribution.  
+		Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+		using</p>
+<p>
+<code>
+% pgpk -a KEYS<br/>
+% pgpv downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% pgp -ka KEYS<br/>
+% pgp downloaded_file.asc<br/>
+</code>
+<em>or</em>
+<br/>
+<code>
+% gpg --import KEYS<br/>
+% gpg --verify downloaded_file.asc
+</code>
+</p>
+<p>Alternatively, you can verify the MD5 signature on the files.  A
+		unix program called <code>md5</code> or <code>md5sum</code> is
+		included in many unix distributions.  It is also available as part of
+		<a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+		Textutils</a>.  Windows users can get binary md5 programs from <a href="http://www.fourmilab.ch/md5/">here</a>, <a href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+		<a href="http://www.slavasoft.com/fsum/">here</a>.</p>
 </div>
 </p>
 </div>

Modified: jakarta/site/xdocs/downloads/download-pages.xsl
URL: http://svn.apache.org/viewvc/jakarta/site/xdocs/downloads/download-pages.xsl?rev=673111&r1=673110&r2=673111&view=diff
==============================================================================
--- jakarta/site/xdocs/downloads/download-pages.xsl (original)
+++ jakarta/site/xdocs/downloads/download-pages.xsl Tue Jul  1 08:57:22 2008
@@ -69,7 +69,7 @@
               <xsl:attribute name="value"><xsl:value-of select="'Change'"/></xsl:attribute>
               </input>
             </form>
-            </p>
+            </p>            
         </xsl:if>
         <p>
 
@@ -100,6 +100,42 @@
             </ul>
           </xsl:if>
           <xsl:apply-templates select="downloads"/>
+        <h3>Verification of downloads</h3>
+		<p>It is essential that you verify the integrity of the downloaded
+		files using the PGP or MD5 signatures.  Please read <a
+		href="http://www.apache.org/info/verification.html">Verifying Apache Software Foundation Releases</a> for
+		more information on why you should verify our releases.</p>
+		
+		<p>The PGP signatures can be verified using PGP or GPG.  First
+		download the <code>KEYS</code>
+		as well as the <code>asc</code> signature file for the relevant
+		distribution.  
+		Make sure you get these files from the main distribution site, rather than from a mirror. Then verify the signatures
+		using</p>
+
+<p><code>
+% pgpk -a KEYS<br />
+% pgpv downloaded_file.asc<br />
+</code>
+<em>or</em><br />
+<code>
+% pgp -ka KEYS<br />
+% pgp downloaded_file.asc<br />
+</code>
+<em>or</em><br />
+<code>
+% gpg --import KEYS<br />
+% gpg --verify downloaded_file.asc
+</code></p>
+
+		<p>Alternatively, you can verify the MD5 signature on the files.  A
+		unix program called <code>md5</code> or <code>md5sum</code> is
+		included in many unix distributions.  It is also available as part of
+		<a href="http://www.gnu.org/software/textutils/textutils.html">GNU
+		Textutils</a>.  Windows users can get binary md5 programs from <a
+		href="http://www.fourmilab.ch/md5/">here</a>, <a
+		href="http://www.pc-tools.net/win32/freeware/console/">here</a>, or
+		<a href="http://www.slavasoft.com/fsum/">here</a>.</p>
         </section>
       </body>
       </document>



---------------------------------------------------------------------
To unsubscribe, e-mail: site-cvs-unsubscribe@jakarta.apache.org
For additional commands, e-mail: site-cvs-help@jakarta.apache.org


Mime
View raw message