myfaces-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Sebb (JIRA)" <...@myfaces.apache.org>
Subject [jira] [Commented] (TOBAGO-1834) Please use HTTPS for the KEYS link
Date Wed, 13 Dec 2017 12:41:00 GMT

    [ https://issues.apache.org/jira/browse/TOBAGO-1834?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16289209#comment-16289209
] 

Sebb commented on TOBAGO-1834:
------------------------------

Just noticed another problem with the download page:

The "Verifying signatures" section has some sample command-lines.
However the commands are all shown on one line.

Also, the gpg command must include the name of the archive, for example:
% gpg --verify myfaces-tobago-<version>-dist.tar.gz.asc myfaces-tobago-<version>-dist.tar.gz
See:
https://www.apache.org/info/verification.html#CheckingSignatures

> Please use HTTPS for the KEYS link
> ----------------------------------
>
>                 Key: TOBAGO-1834
>                 URL: https://issues.apache.org/jira/browse/TOBAGO-1834
>             Project: MyFaces Tobago
>          Issue Type: Bug
>         Environment: http://myfaces.apache.org/tobago/download.html
>            Reporter: Sebb
>            Assignee: Udo Schnurpfeil
>            Priority: Minor
>
> As the subject says.
> The download page already uses https for hashes and sigs; it needs to also do so for
the KEYS file please.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message