svn commit: r609694 - /lenya/trunk/INSTALL-SRC.txt

Author: nettings
Date: Mon Jan  7 09:12:36 2008
New Revision: 609694

URL: http://svn.apache.org/viewvc?rev=609694&view=rev
Log:
added md5 sum verification instructions, minor other fixes.


Modified:
    lenya/trunk/INSTALL-SRC.txt

Modified: lenya/trunk/INSTALL-SRC.txt
URL: http://svn.apache.org/viewvc/lenya/trunk/INSTALL-SRC.txt?rev=609694&r1=609693&r2=609694&view=diff
==============================================================================
--- lenya/trunk/INSTALL-SRC.txt (original)
+++ lenya/trunk/INSTALL-SRC.txt Mon Jan  7 09:12:36 2008
@@ -61,11 +61,18 @@
       (Windows: start -> Control Panel -> System -> Advanced -> Environment Variables -> User variables
       ...)
 
-   2. Change into the directory where you want your Lenya sources to be, and either
-      * download the release tarball, and unpack it:
+   2. Download Lenya (in case you don't have it already), and compute the
+      MD5 checksum of the Lenya distribution file:
+
+        md5sum <apache-lenya file>
+
+      Then visit http://people.apache.org/~henkp/cgi-bin/md5.cgi and follow the instructions
+      to verify the integrity of the file you have downloaded.
+
+      Change into the directory where you want your Lenya sources to be, and unpack the source:
  
-        cd /your/build/directory
-        tar xvzf lenya-2.0-src.tar.gz
+        tar xvzf <apache-lenya>.tar.gz (for the tarball)
+        unzip <apache-lenya>.zip (for the zip archive)
 
       OR
       
@@ -171,6 +178,13 @@
 
 
 Security Considerations
+
+   Prior to compilation, you should verify the integrity of the file you
+   just downloaded, by following the instructions at
+     
+     http://people.apache.org/~henkp/cgi-bin/md5.cgi
+ 
+   In case of doubt, please ask on the mailing lists before proceeding.  
 
    It is advisable to run Lenya's servlet container with limited privileges,
    to reduce the impact of a possible exploit.