[BEAM-3717] Problems with download page

• Type: Bug
• Status: Resolved
• Priority: P3
• Resolution: Fixed
• Fix Version/s: Not applicable
• Component/s: website
• Assignee: Unassigned
• Reporter: Sebb
• Created: 19/Feb/18 15:17
• Updated: 15/Mar/22 15:48
• Resolved: 15/Mar/22 15:48

Description

The download page has some problems:

1) Links to previous releases are broken.
These should either be removed, or be converted to use the archive server, e.g. instead of

https://www.apache.org/dyn/closer.cgi?filename=beam/2.2.0/apache-beam-2.2.0-source-release.zip&action=download

use

https://archive.apache.org/dist/beam/2.2.0/apache-beam-2.2.0-source-release.zip

2) The download page must include links to the signature (.asc) file and hashes for all downloads.

These must be linked from https://www.apache.org/dist/beam/... (or archive.apache.org for older releases)

3) There should be a link to the KEYS file at
https://www.apache.org/dist/beam/KEYS

4) There should be instructions on the need to verify downloads.
See for example:
https://tomcat.apache.org/download-70.cgi#Release_Integrity

Issue Links

• links to: GitHub Pull Request #6631