Page History

...

Typically, this includes three zip files (core, extensions and installer) along with checksum, signature, README, RELEASE_VALIDATION and RELEASE_NOTES.

Step 2: Validate incubator-streampipes

First, open the core folder (core/{version}/{rc}).

Check signatures and checksums

Verify the signature

...

You can either download the release artifacts one by one, or use the convenient single line command below:

# download all release artifacts (core, extensions, installer)
wget --recursive --no-host-directories -e robots=off --cut-dirs=5 --no-parent --reject "index.html*" https://dist.apache.org/repos/dist/dev/incubator/streampipes/

Step 2: Validate incubator-streampipes

First, open the core folder (core/{version}/{rc}).

Check signatures and checksums

Verify the signature

...

If the output says "public key not found", follow the instructions in this guide: Validate a release for the first time

...

•  Download all staged artifacts under the url specified in the release vote email
•  Verify the signature is correct
•  Check if the signature references an Apache email address
•  Verify the SHA512 checksum
•  Unzip the archive
•  Verify the existence of LICENSE, NOTICE, README, RELEASE_NOTES, RELEASE_VALIDATION files in the extracted source bundle.
•  Run RAT
•  Search for SNAPSHOT dependencies
•  Build Backend
•  Build UI
•  Build Extensions