From 3321b220b8b4271b868e802a4dfcf54224c64a42 Mon Sep 17 00:00:00 2001
From: Ceki Gulcu <ceki@qos.ch>
Date: Thu, 8 Jul 2021 15:55:03 +0200
Subject: [PATCH] add info for verifying signed artifacts

Signed-off-by: Ceki Gulcu <ceki@qos.ch>
---
 slf4j-site/src/site/pages/download.html       | 15 ++++++++++
 .../resources/public-keys/ceki-public-key.pgp | 29 +++++++++++++++++++
 2 files changed, 44 insertions(+)
 create mode 100644 slf4j-site/src/site/resources/public-keys/ceki-public-key.pgp

diff --git a/slf4j-site/src/site/pages/download.html b/slf4j-site/src/site/pages/download.html
index 6935669bc..5aed5b246 100755
--- a/slf4j-site/src/site/pages/download.html
+++ b/slf4j-site/src/site/pages/download.html
@@ -40,6 +40,21 @@ <h2>Maven central</h2>
       href="https://repo1.maven.org/maven2/org/slf4j/">Maven
       central</a>. The corresponding groupId is <code>org.slf4j</code>.</p>
 
+      <h2>Verifying contents</h2>
+
+      <p>All SLF4J artifacts published on Maven central are signed. For each
+      artifact, there is an associated signature file with the
+      <em>.asc</em> suffix.</p>
+
+      <p>To verify the signature use this <a
+      href="public-keys/ceki-public-key.pgp">public key</a>. Here is
+      its fingerprint:</p>
+
+      <pre>pub   2048R/A511E325 2012-04-26
+Key fingerprint = 475F 3B8E 59E6 E63A A780  6748 2C7B 12F2 A511 E325
+uid   Ceki Gulcu &lt;ceki@qos.ch>
+sub   2048R/7FBFA159 2012-04-26
+      </pre>
 
   <script src="templates/footer.js" type="text/javascript"></script>
 </div>
diff --git a/slf4j-site/src/site/resources/public-keys/ceki-public-key.pgp b/slf4j-site/src/site/resources/public-keys/ceki-public-key.pgp
new file mode 100644
index 000000000..fefb7ebf1
--- /dev/null
+++ b/slf4j-site/src/site/resources/public-keys/ceki-public-key.pgp
@@ -0,0 +1,29 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=9O4j
+-----END PGP PUBLIC KEY BLOCK-----