Uploaded image for project: 'Jenkins Website'
  1. Jenkins Website
  2. WEBSITE-481

publish the sh256sum and gpg signature for the generic war download on the website and mirrors.jenkins.io

    Details

    • Type: Task
    • Status: To Do (View Workflow)
    • Priority: Minor
    • Resolution: Unresolved
    • Component/s: content
    • Labels:
      None
    • Similar Issues:

      Description

      The downlaod for the generic war provides no guidlines on how to validate it is not tampered on the download page.

      We provide a sha256sum if you look on the actual download site, and we provide a GPG signature if you know to look in the maven repo.

      the GPG should also be on the download site, and the way to validate the download should be mentioned on the main website.

        Attachments

          Activity

          Hide
          danielbeck Daniel Beck added a comment -

          There's also jarsigner. Probably more of a WEBSITE issue, but I'll let Tyler fix that.

          Show
          danielbeck Daniel Beck added a comment - There's also jarsigner . Probably more of a WEBSITE issue, but I'll let Tyler fix that.

            People

            • Assignee:
              rtyler R. Tyler Croy
              Reporter:
              teilo James Nord
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated: