logging-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bode...@apache.org
Subject svn commit: r1179101 - in /logging/log4net/trunk/src/site: apt/download.apt xdoc/release/faq.xml
Date Wed, 05 Oct 2011 08:34:45 GMT
Author: bodewig
Date: Wed Oct  5 08:34:45 2011
New Revision: 1179101

URL: http://svn.apache.org/viewvc?rev=1179101&view=rev
Log:
explain the story of the new string name key

Modified:
    logging/log4net/trunk/src/site/apt/download.apt
    logging/log4net/trunk/src/site/xdoc/release/faq.xml

Modified: logging/log4net/trunk/src/site/apt/download.apt
URL: http://svn.apache.org/viewvc/logging/log4net/trunk/src/site/apt/download.apt?rev=1179101&r1=1179100&r2=1179101&view=diff
==============================================================================
--- logging/log4net/trunk/src/site/apt/download.apt (original)
+++ logging/log4net/trunk/src/site/apt/download.apt Wed Oct  5 08:34:45 2011
@@ -26,23 +26,12 @@ Download Apache log4net™
   binary only release.
 
   There are two different binary releases, <<<oldkey>>> and
-  <<<newkey>>>.  Both contain assemblies built for all supported
+  <<<newkey>>>.  Both contain assemblies built for most supported
   platforms and have been built from the same code base, they only
   differ in the strong name key used to sign the assemblies.
 
-  The <<<oldkey>>> distribution contains assemblies signed with the
-  same strong name key that was used to sign the assemblies of log4net
-  1.2.10 and earlier.  This strong name key is only available to
-  log4net developers.
-
-  The <<<newkey>>> distribution contains assemblies signed with the
-  strong name key available from
-  {{{https://svn.apache.org/repos/asf/logging/log4net/trunk/log4net.snk}log4net's svn area}}.
-  Everybody can create assemblies that have the same strong name which
-  is important if you want to use your own patched version of log4net.
-
-  We recommend you use the assemblies signed with the "new" key
-  whenever possible.
+  See {{{./release/faq.html#two-snks}the FAQ}} for background.  We recommend
+  you use the assemblies signed with the "new" key whenever possible.
 
   The link in the Mirrors column will lead you to a list of available
   mirrors with a default selection based on your inferred location.
@@ -54,11 +43,11 @@ Download Apache log4net&#x2122;
                          | Mirrors | Checksum | Signature |
 *------------------------+---------+----------+-----------+
 *------------------------+---------+----------+-----------+
- log4net 1.2.10 Source Distribution      | {{{http://www.apache.org/dyn/closer.cgi/logging/log4net/1.2.11/source/log4net-1.2.11-src.zip}
log4net-1.2.11-src.zip}} | {{{http://www.apache.org/dist/logging/log4net/1.2.11/source/log4net-1.2.11-src.zip.md5}
log4net-1.2.11-src.zip.md5}} | {{{http://www.apache.org/dist/logging/log4net/1.2.11/source/log4net-1.2.11-src.zip.asc}
log4net-1.2.11-src.zip.asc}}|
+ log4net 1.2.11 Source Distribution      | {{{http://www.apache.org/dyn/closer.cgi/logging/log4net/1.2.11/source/log4net-1.2.11-src.zip}
log4net-1.2.11-src.zip}} | {{{http://www.apache.org/dist/logging/log4net/1.2.11/source/log4net-1.2.11-src.zip.md5}
log4net-1.2.11-src.zip.md5}} | {{{http://www.apache.org/dist/logging/log4net/1.2.11/source/log4net-1.2.11-src.zip.asc}
log4net-1.2.11-src.zip.asc}}|
 *------------------------+---------+----------+-----------+
- log4net 1.2.10 Binary Distribution New Strong Name | {{{http://www.apache.org/dyn/closer.cgi/logging/log4net/1.2.11/binaries/log4net-1.2.11-bin-newkey.zip}
log4net-1.2.11-bin-newkey.zip}} | {{{http://www.apache.org/dist/logging/log4net/1.2.11/binaries/log4net-1.2.11-bin-newkey.zip.md5}
log4net-1.2.11-bin-newkey.zip.md5}} | {{{http://www.apache.org/dist/logging/log4net/1.2.11/binaries/log4net-1.2.11-bin-newkey.zip.asc}
log4net-1.2.11-bin-newkey.zip.asc}}|
+ log4net 1.2.11 Binary Distribution New Strong Name | {{{http://www.apache.org/dyn/closer.cgi/logging/log4net/1.2.11/binaries/log4net-1.2.11-bin-newkey.zip}
log4net-1.2.11-bin-newkey.zip}} | {{{http://www.apache.org/dist/logging/log4net/1.2.11/binaries/log4net-1.2.11-bin-newkey.zip.md5}
log4net-1.2.11-bin-newkey.zip.md5}} | {{{http://www.apache.org/dist/logging/log4net/1.2.11/binaries/log4net-1.2.11-bin-newkey.zip.asc}
log4net-1.2.11-bin-newkey.zip.asc}}|
 *------------------------+---------+----------+-----------+
- log4net 1.2.10 Binary Distribution Old Strong Name | {{{http://www.apache.org/dyn/closer.cgi/logging/log4net/1.2.11/binaries/log4net-1.2.11-bin-oldkey.zip}
log4net-1.2.11-bin-oldkey.zip}} | {{{http://www.apache.org/dist/logging/log4net/1.2.11/binaries/log4net-1.2.11-bin-oldkey.zip.md5}
log4net-1.2.11-bin-oldkey.zip.md5}} | {{{http://www.apache.org/dist/logging/log4net/1.2.11/binaries/log4net-1.2.11-bin-oldkey.zip.asc}
log4net-1.2.11-bin-oldkey.zip.asc}}|
+ log4net 1.2.11 Binary Distribution Old Strong Name | {{{http://www.apache.org/dyn/closer.cgi/logging/log4net/1.2.11/binaries/log4net-1.2.11-bin-oldkey.zip}
log4net-1.2.11-bin-oldkey.zip}} | {{{http://www.apache.org/dist/logging/log4net/1.2.11/binaries/log4net-1.2.11-bin-oldkey.zip.md5}
log4net-1.2.11-bin-oldkey.zip.md5}} | {{{http://www.apache.org/dist/logging/log4net/1.2.11/binaries/log4net-1.2.11-bin-oldkey.zip.asc}
log4net-1.2.11-bin-oldkey.zip.asc}}|
 *------------------------+---------+----------+-----------+
 
   Please read {{{http://httpd.apache.org/dev/verification.html}Verifying Apache HTTP Server
Releases}}

Modified: logging/log4net/trunk/src/site/xdoc/release/faq.xml
URL: http://svn.apache.org/viewvc/logging/log4net/trunk/src/site/xdoc/release/faq.xml?rev=1179101&r1=1179100&r2=1179101&view=diff
==============================================================================
--- logging/log4net/trunk/src/site/xdoc/release/faq.xml (original)
+++ logging/log4net/trunk/src/site/xdoc/release/faq.xml Wed Oct  5 08:34:45 2011
@@ -286,6 +286,62 @@ limitations under the License.
                 </section>
                 <p><a href="#top">Back to Top</a></p>
                 
+                <section id="two-snks"
+                         name="Why are there two different strong name keys?">
+                  <p>
+                    Starting with log4net 1.2.11 there are two
+                    different binary distributions,
+                    <code>oldkey</code> and <code>newkey</code>.
+                  </p>
+
+                  <p>
+                    The <code>oldkey</code> distribution contains
+                    assemblies signed with the same strong name key
+                    that was used to sign the assemblies of log4net
+                    1.2.10 and earlier.  This strong name key is only
+                    available to log4net developers.
+                  </p>
+
+                  <p>
+                    The <code>newkey</code> distribution contains
+                    assemblies signed with the strong name key
+                    available from <a
+                    href="https://svn.apache.org/repos/asf/logging/log4net/trunk/log4net.snk">log4net's
+                    svn area</a> or inside the source distribution.
+                    Everybody can create assemblies that have the same
+                    strong name.
+                  </p>
+
+                  <p>
+                    For open source projects it is important that you
+                    can create your own patched version of a product
+                    and use it instead of the official release.  This
+                    is something that is now possible if the
+                    <code>newkey</code> is used throughout.
+                  </p>
+
+                  <p>
+                    The <code>oldkey</code> distribution is mostly
+                    only for people who work with third-party
+                    dependencies that require one of the earlier
+                    releases of log4net and can't be recompiled to use
+                    the new strong name.  If you start a new project
+                    or can recompile all your dependencies we strongly
+                    recommend you use the <code>newkey</code>
+                    assemblies.
+                  </p>
+
+                  <p>
+                    Note that the "new" strong name no longer provides
+                    any kind of authenticity.  If you want to be sure
+                    you have the "real" Apache log4net, download the binary
+                    release from one of the mirrors and verify the PGP
+                    signature.
+                  </p>
+
+                </section>
+                <p><a href="#top">Back to Top</a></p>
+
             </section>
 
             <section id="configuration" name="Configuration">



Mime
View raw message