diff --git a/docs/bindownload.html b/docs/bindownload.html index fa32b890c..1913bc843 100644 --- a/docs/bindownload.html +++ b/docs/bindownload.html @@ -238,16 +238,19 @@ may not be available on all mirrors for a few days.
  • .zip archive: apache-ant-1.6.3-bin.zip [PGP] + [MD5]
  • .tar.gz archive: apache-ant-1.6.3-bin.tar.gz [PGP] + [MD5]
  • .tar.bz2 archive: apache-ant-1.6.3-bin.tar.bz2 [PGP] + [MD5]

    • @@ -270,7 +273,8 @@ recommend to not use those releases but upgrade to Ant's KEYS as well as the asc signature file for the particular @@ -291,12 +295,12 @@ using

    % gpg --import KEYS
    % gpg --verify apache-ant-1.6.3-bin.tar.gz.asc

    -

    Alternatively, you can verify the MD5 signature on the files. A -unix program called md5 or md5sum is -included in many unix distributions. It is also available as part of -GNU -Textutils. Windows users can get binary md5 programs from here, here, or -here.

    +

    Alternatively, you can verify the checksums on the files. Unix +programs called md5/sha1 or +md5sum/sha1sum are included in many unix +distributions. *sum is also available as part of GNU +Textutils. Windows users can get binary md5 programs from here, here. fsum supports MD5 and +SHA1.

    We highly recommend to verify the PGP signature, though.

    diff --git a/docs/srcdownload.html b/docs/srcdownload.html index 8c22a5466..4a9f854ff 100644 --- a/docs/srcdownload.html +++ b/docs/srcdownload.html @@ -236,16 +236,19 @@ may not be available on all mirrors for a few days.
  • .zip archive: apache-ant-1.6.3-src.zip [PGP] + [MD5]
  • .tar.gz archive: apache-ant-1.6.3-src.tar.gz [PGP] + [MD5]
  • .tar.bz2 archive: apache-ant-1.6.3-src.tar.bz2 [PGP] + [MD5]

    • @@ -268,7 +271,8 @@ recommend to not use those releases but upgrade to Ant's KEYS as well as the asc signature file for the particular @@ -289,12 +293,12 @@ using

    % gpg --import KEYS
    % gpg --verify apache-ant-1.6.3-src.tar.gz.asc

    -

    Alternatively, you can verify the MD5 signature on the files. A -unix program called md5 or md5sum is -included in many unix distributions. It is also available as part of -GNU -Textutils. Windows users can get binary md5 programs from here, here, or -here.

    +

    Alternatively, you can verify the checksums on the files. Unix +programs called md5/sha1 or +md5sum/sha1sum are included in many unix +distributions. *sum is also available as part of GNU +Textutils. Windows users can get binary md5 programs from here, here. fsum supports MD5 and +SHA1.

    We highly recommend to verify the PGP signature, though.

    diff --git a/xdocs/bindownload.xml b/xdocs/bindownload.xml index aa9b9f27d..372939940 100644 --- a/xdocs/bindownload.xml +++ b/xdocs/bindownload.xml @@ -49,7 +49,6 @@ directory or, preferably, its mirror.

    -

    You are currently using [preferred]. If you encounter a @@ -94,16 +93,19 @@ may not be available on all mirrors for a few days.

  • .zip archive: apache-ant-1.6.3-bin.zip [PGP] + [MD5]
  • .tar.gz archive: apache-ant-1.6.3-bin.tar.gz [PGP] + [MD5]
  • .tar.bz2 archive: apache-ant-1.6.3-bin.tar.bz2 [PGP] + [MD5]
    • @@ -130,7 +132,8 @@ href="[location]#Current Release of Ant">latest release.

    It is essential that you verify the integrity of the downloaded -files using the PGP or MD5 signatures.

    +files using the PGP signature or the SHA1 or MD5 checksums. The +checksums are not as strong indicators as the PGP signature.

    The PGP signatures can be verified using PGP or GPG. First download the KEYS @@ -155,14 +158,16 @@ using

    % gpg --verify apache-ant-1.6.3-bin.tar.gz.asc

    -

    Alternatively, you can verify the MD5 signature on the files. A -unix program called md5 or md5sum is -included in many unix distributions. It is also available as part of -GNU +

    Alternatively, you can verify the checksums on the files. Unix +programs called md5/sha1 or +md5sum/sha1sum are included in many unix +distributions. *sum is also available as part of GNU Textutils. Windows users can get binary md5 programs from here, here, or -here.

    +href="http://www.pc-tools.net/win32/freeware/console/">here. fsum supports MD5 and +SHA1.

    We highly recommend to verify the PGP signature, though.

    diff --git a/xdocs/srcdownload.xml b/xdocs/srcdownload.xml index ef6721375..71b2c7f03 100644 --- a/xdocs/srcdownload.xml +++ b/xdocs/srcdownload.xml @@ -90,16 +90,19 @@ may not be available on all mirrors for a few days.
  • .zip archive: apache-ant-1.6.3-src.zip [PGP] + [MD5]
  • .tar.gz archive: apache-ant-1.6.3-src.tar.gz [PGP] + [MD5]
  • .tar.bz2 archive: apache-ant-1.6.3-src.tar.bz2 [PGP] + [MD5]
    • @@ -126,7 +129,8 @@ href="[location]#Current Release of Ant">latest release.

    It is essential that you verify the integrity of the downloaded -files using the PGP or MD5 signatures.

    +files using the PGP signature or the SHA1 or MD5 checksums. The +checksums are not as strong indicators as the PGP signature.

    The PGP signatures can be verified using PGP or GPG. First download the KEYS @@ -151,14 +155,16 @@ using

    % gpg --verify apache-ant-1.6.3-src.tar.gz.asc

    -

    Alternatively, you can verify the MD5 signature on the files. A -unix program called md5 or md5sum is -included in many unix distributions. It is also available as part of -GNU +

    Alternatively, you can verify the checksums on the files. Unix +programs called md5/sha1 or +md5sum/sha1sum are included in many unix +distributions. *sum is also available as part of GNU Textutils. Windows users can get binary md5 programs from here, here, or -here.

    +href="http://www.pc-tools.net/win32/freeware/console/">here. fsum supports MD5 and +SHA1.

    We highly recommend to verify the PGP signature, though.