[
https://issues.apache.org/jira/browse/CMIS-516?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sebb reopened CMIS-516:
-----------------------
The links to the sigs and hashes are broken.
These files are intentionally not propagated to mirrors, and should only be
linked to from https://www.apache.org/dist/chemistry/, e.g.
https://www.apache.org/dist/chemistry/cmislib/0.5.1/cmislib-0.5.1-py2.7.egg.asc
Also the link to the KEYS file should ideally use HTTPS:
https://www.apache.org/dist/chemistry/KEYS
> Download page does not include pointer to KEYS file or hashes, nor how to use
> them
> ----------------------------------------------------------------------------------
>
> Key: CMIS-516
> URL: https://issues.apache.org/jira/browse/CMIS-516
> Project: Chemistry
> Issue Type: Bug
> Environment: http://chemistry.apache.org/java/download.html
> Reporter: Sebb
> Priority: Critical
>
> The download page must include sigs and hashes (to be downloaded from the
> main ASF server, not mirrors) and must include a link to the KEYS file used
> to verify sigs.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
