layouts/shortcodes/download-verify.html

{{ $filename := .Inner }}
<h1><a name="verifyIntegrity"></a>Verify the integrity of the file</h1>
                    
<p>
    The PGP signatures can be verified using PGP or GPG. First download the <a href="https://downloads.apache.org/directory/KEYS">KEYS</a>
    as well as the <em>asc</em> signature file for the relevant distribution. Then verify the signatures using:
</p>

<div class="preformatted">
    <div class="preformattedContent">
        <pre>$ pgpk -a KEYS
$ gpgv {{ $filename }}.asc</pre>
    </div>
</div>
or
<div class="preformatted">
    <div class="preformattedContent">
        <pre>$ pgp -ka KEYS
$ gpg {{ $filename }}.asc {{ $filename }}</pre>
    </div>
</div>
or
<div class="preformatted">
    <div class="preformattedContent">
        <pre>$ gpg --import KEYS
$ gpg --verify {{ $filename }}.asc {{ $filename }}</pre>
    </div>
</div>

<p>&nbsp;</p>

<p>Alternatively, you can verify the checksums of the files (see the <a href="https://www.apache.org/info/verification.html">How to verify downloaded files</a> page). </p>
<p>&nbsp;</p>