Skip to content

HAWQ-1638. Add how to verify downloaded files section, removed md5 keys. #17

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 2 commits into
base: asf-site
Choose a base branch
from
Open

HAWQ-1638. Add how to verify downloaded files section, removed md5 keys. #17

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
fff3da1
HAWQ-1638. Add how to verify downloaded files section, removed md5 keys.
radarwave Jul 10, 2018
09d9c0f
HAWQ-1638. Fix some description words.
radarwave Jul 11, 2018
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
50 changes: 43 additions & 7 deletions index.html
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -357,17 +357,15 @@ <h2 class="icon icon-download">Download HAWQ&reg 2.2.0.0-incubating</h2>
<span class="info">
Version 2.2.0.0 |
<a href="https://archive.apache.org/dist/incubator/hawq/2.2.0.0-incubating/apache-hawq-rpm-2.2.0.0-incubating.tar.gz.asc">PGP</a> |
<a href="https://archive.apache.org/dist/incubator/hawq/2.2.0.0-incubating/apache-hawq-rpm-2.2.0.0-incubating.tar.gz.sha256">SHA-256</a> |
<a href="https://archive.apache.org/dist/incubator/hawq/2.2.0.0-incubating/apache-hawq-rpm-2.2.0.0-incubating.tar.gz.md5">MD5</a>
<a href="https://archive.apache.org/dist/incubator/hawq/2.2.0.0-incubating/apache-hawq-rpm-2.2.0.0-incubating.tar.gz.sha256">SHA-256</a>
</span>
</li>
<li>
<a href="https://archive.apache.org/dist/incubator/hawq/2.2.0.0-incubating/apache-hawq-src-2.2.0.0-incubating.tar.gz" class="type">Source</a>
<span class="info">
Version 2.2.0.0 |
<a href="https://archive.apache.org/dist/incubator/hawq/2.2.0.0-incubating/apache-hawq-src-2.2.0.0-incubating.tar.gz.asc">PGP</a> |
<a href="https://archive.apache.org/dist/incubator/hawq/2.2.0.0-incubating/apache-hawq-src-2.2.0.0-incubating.tar.gz.sha256">SHA-256</a> |
<a href="https://archive.apache.org/dist/incubator/hawq/2.2.0.0-incubating/apache-hawq-src-2.2.0.0-incubating.tar.gz.md5">MD5</a>
<a href="https://archive.apache.org/dist/incubator/hawq/2.2.0.0-incubating/apache-hawq-src-2.2.0.0-incubating.tar.gz.sha256">SHA-256</a>
</span>
</li>
</ul>
Expand Down Expand Up @@ -396,8 +394,7 @@ <h2 class="icon icon-download">Download HAWQ&reg 2.1.0.0-incubating</h2>
<span class="info">
Version 2.1.0.0 |
<a href="https://archive.apache.org/dist/incubator/hawq/2.1.0.0-incubating/apache-hawq-src-2.1.0.0-incubating.tar.gz.asc">PGP</a> |
<a href="https://archive.apache.org/dist/incubator/hawq/2.1.0.0-incubating/apache-hawq-src-2.1.0.0-incubating.tar.gz.sha256">SHA-256</a> |
<a href="https://archive.apache.org/dist/incubator/hawq/2.1.0.0-incubating/apache-hawq-src-2.1.0.0-incubating.tar.gz.md5">MD5</a>
<a href="https://archive.apache.org/dist/incubator/hawq/2.1.0.0-incubating/apache-hawq-src-2.1.0.0-incubating.tar.gz.sha256">SHA-256</a>
</span>
</li>
</ul>
Expand Down Expand Up @@ -427,7 +424,6 @@ <h2 class="icon icon-download">Download HAWQ&reg 2.0.0.0-incubating</h2>
Version 2.0.0.0 |
<a href="https://archive.apache.org/dist/incubator/hawq/2.0.0.0-incubating/apache-hawq-src-2.0.0.0-incubating.tar.gz.asc">PGP</a> |
<a href="https://archive.apache.org/dist/incubator/hawq/2.0.0.0-incubating/apache-hawq-src-2.0.0.0-incubating.tar.gz.sha1">SHA-1</a> |
<a href="https://archive.apache.org/dist/incubator/hawq/2.0.0.0-incubating/apache-hawq-src-2.0.0.0-incubating.tar.gz.md5">MD5</a>
</span>
</li>
</ul>
Expand All @@ -438,6 +434,46 @@ <h2 class="icon icon-download">Download HAWQ&reg 2.0.0.0-incubating</h2>

</div>

<div class="wrap">
<div class="corner"></div>
<div class="download-list-container"><h2 id="how-to-verify"><a href="http://www.apache.org/info/verification.html">How to verify downloaded files?</a></h2>
<p>
<strong>Note</strong>: When downloading from a mirror, please be sure to verify that checksums and signatures are correct. To do so, use the checksum and signature files from the main Apache site at
<a href="https://www.apache.org/dist/incubator/hawq/">https://www.apache.org/dist/incubator/hawq/</a>. Check here to get all the verification required files including OpenPGP keys that we used to sign releases:
<a href="https://www.apache.org/dist/incubator/hawq/KEYS">KEYS</a>
</p>
<p>
The PGP signatures can be verified using PGP or GPG. First download the <a href="https://www.apache.org/dist/incubator/hawq/KEYS">KEYS</a>
as well as the asc signature file for the particular distribution. Then verify the signatures using:
</p>
<p>
% pgpk -a KEYS
<br><br>
% pgpv ${filename}.tar.gz.asc
<br><br>
or
<br><br>
% pgp -ka KEYS
<br><br>
% pgp ${filename}.tar.gz.asc
<br><br>
or
<br><br>
% gpg --import KEYS
<br><br>
% gpg --verify ${filename}.tar.gz.asc
<br><br>
</p>
<p>
Alternatively, you can verify the SHA signature on the files.<br>
For example, to check a SHA256 sum of a file:<br>
On Linux:<br>
% sha256sum filename.sha<br>
On Mac:<br>
% shasum -a 256 filename.sha
</p>
</div>
</div>

<a class="scroll-point" id="more"></a>

Expand Down