Details
-
Bug
-
Status: Closed
-
Major
-
Resolution: Fixed
-
None
-
None
Description
The download page hash and sig links don't work.
This is because hashes and sigs are not mirrored to external servers.
The download page must link to the ASF copies, for example
www.apache.org/dist/openwebbeans/1.2.0/openwebbeans-distribution-1.2.0-binary.zip.asc
Also, the download page must contain a link to the KEYS file which is needed for validating signatures.
The page should also contain details of how to check hashes and sigs (or a link to a suitable description).