[
https://issues.apache.org/jira/browse/GORA-71?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13180080#comment-13180080
]
Sebb commented on GORA-71:
--------------------------
The hashes need to be linked from the ASF /dist server only - they are not
mirrored.
Although the sigs are mirrored, the links should still point to the ASF server,
not the mirror.
Only the archives should be linked to the mirror.
> Download page does not include pointer to KEYS file or hashes
> -------------------------------------------------------------
>
> Key: GORA-71
> URL: https://issues.apache.org/jira/browse/GORA-71
> Project: Gora
> Issue Type: Bug
> Reporter: Sebb
> Assignee: Lewis John McGibbney
> Priority: Critical
>
> The download page includes a link to the archive and its gpg signatiure, but
> there is no link to the KEYS file nor any links for hashes.
> These must all be linked from ASF hosts.
> Also, the download directory contains a zip archive, but this is not listed
> on the download page.
> The download page should also give information on how to check sigs and
> hashes.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira