[ARROW-1936] Broken links to signatures/hashes etc

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.8.0
• Component/s: Website
• Environment: http://arrow.apache.org/install/
• External issue URL: https://github.com/apache/arrow/issues/17927
• Assignee: Wes McKinney
• Reporter: Sebb
• Created: 19/Dec/17 01:27
• Updated: 11/Jan/23 07:17
• Resolved: 19/Dec/17 14:39

Description

Links to KEYS, sigs and hashes must use the ASF host, not the mirrors, as such files are deliberately not mirrored.

i.e. use

http://www.apache.org/dist/arrow/KEYS
https://www.apache.org/dist/arrow/arrow-0.8.0/apache-arrow-0.8.0.tar.gz.sha512
etc.

The download page needs to include a link to the KEYS file (the asc file is no use without it) and should provide details of how to check sigs and hashes, for example:

https://www.apache.org/dyn/closer.cgi#verify