diff --git a/proposal/ant-site/anakia/docs/download.cgi b/proposal/ant-site/anakia/docs/download.cgi new file mode 100755 index 000000000..06a42f201 --- /dev/null +++ b/proposal/ant-site/anakia/docs/download.cgi @@ -0,0 +1,6 @@ +#!/bin/sh +# Wrapper script around mirrors.cgi script +# (we must change to that directory in order for python to pick up the +# python includes correctly) +cd /www/www.apache.org/dyn/mirrors +/www/www.apache.org/dyn/mirrors/mirrors.cgi $* diff --git a/proposal/ant-site/anakia/docs/index.html b/proposal/ant-site/anakia/docs/index.html index 35176101f..1a27ed7fa 100644 --- a/proposal/ant-site/anakia/docs/index.html +++ b/proposal/ant-site/anakia/docs/index.html @@ -178,11 +178,14 @@ Comprehensive documentation is included in the source and binary distributions.
Use the links below to download the Ant from one of our mirrors. +You must verify the integrity of +the downloaded files using signatures downloaded from our main +distribution directory.
+ +If you do not see the file you need in the links below, please see +the master distribution +directory or, preferably, its mirror.
+ +You are currently using [preferred]. If you encounter a +problem with this mirror, please select another mirror. If all +mirrors are failing, there are backup mirrors (at the end of +the mirrors list) that should be available.
+ + +Currently, Apache Ant 1.5.1 is the best available version.
+ +We also provide other packaging formats that may be of interest.
+ + + +If you wish to use the latest Ant features, you can try downloading a +nightly build. +
+ +It is essential that you verify the integrity of the downloaded +files using the PGP or MD5 signatures.
+ +The PGP signatures can be verified using PGP or GPG. First
+download the KEYS
+as well as the asc
signature file for the particular
+distribution. Make sure you get these files from the main distribution
+directory, rather than from a mirror. Then verify the signatures
+using
+% pgpk -a KEYS
+or
+% pgpv jakarta-ant-bin-1.5.1.tar.gz.asc
+
+
+% pgp -ka KEYS
+or
+% pgp jakarta-ant-bin-1.5.1.tar.gz.asc
+
+
+% gpg -import KEYS
+% gpg -verify jakarta-ant-bin-1.5.1.tar.gz.asc
+
Alternatively, you can verify the MD5 signature on the files. A
+unix program called md5
or md5sum
is
+included in many unix distributions. It is also available as part of
+GNU
+Textutils. Windows users can get binary md5 programs from here, here, or
+here.
We highly recommend to verify the PGP signature, though.
+ +