Apache OpenOffice (AOO) Bugzilla – Issue 122865
"other.html" download page does not have links to hashes/sigs
Last modified: 2013-08-02 18:27:00 UTC
The page http://www.openoffice.org/download/other.html has a link entitled Release notes and ASC, MD5, SHA256 checksums which links to http://www.openoffice.org/download/other.html#source However, there don't appear to be any sigs (ASC) or checksums. These are required for all ASF releases (hence the priority).
@sebb: It seems you haven't followed the dev@ mailing list as this was a topic on Thurday: ;-) http://mail-archives.apache.org/mod_mbox/openoffice-dev/201307.mbox/%3C51F052CF.8070605%40wtnet.de%3E However, when downloading via the green download button you have links to the hashfiles for the respective file.
The new webpage with included links to the hash files is now Live. http://www.openoffice.org/download/other.html I've also created a new webpage how to use them: http://www.openoffice.org/download/checksums.html
The download page must also link to the KEYS file. Have a look at some of the other ASF download pages, for example: http://tomcat.apache.org/download-70.cgi http://httpd.apache.org/download.cgi
Also, the links to the hashes and sigs don't actually work. For example: /dist/openoffice/4.0.0/binaries//binaries/ast/Apache_OpenOffice_4.0.0_Win_x86_install_ast.exe.asc was not found on this server. It looks like an extra segment has been added to the path. It should be http://www.apache.org/dist/openoffice/4.0.0/binaries/ast/Apache_OpenOffice_4.0.0_Win_x86_install_ast.exe.asc
"marcus" committed SVN revision 1509034 #122865# Fixed broken links
a) Hm, strange. With my tests it had worked. Anyway, I've fixed the little issue with the broken links. b) Will start now to fix the issue with non-mentioned KEYS file.
I've added the missing link to the KEYS file and a bit describing text. Please check here: http://ooo-site.staging.apache.org/download/other.html
"marcus" committed SVN revision 1509048 #122865# Added text section about file integrity verification and the link to...
The hashes and sig links now work OK, as does the KEYS link. And the recommendation to check the download hashes/sigs is good. However the link to checksums.html does not work properly in Firefox, probably because the HTML looks like this: read the guide: <a href="checksums.html" title="#How" to="" verify="" the="" download="" with="" signatures="" and="" hash="" values?'="">How to verify the download with signatures and hash values?</a>. There are lots of invalid attributes in the <a> tag.
I cannot see any problem with the link in Firefox. However, I found an incomplete title that was caused due to wrong character for quoting the text (# instead of ' , both chars are on the same key on my keyboard ;-) ) Maybe this was also the cause for the problem you've seen?
Yes, fixing the title solved the issue for Firefox. The Javascript was broken in the previous version of the page. That can cause all sorts of problems.