[PATCH] Make it clear that 'Hash: SHA1' does not specify the checksum hash

[Todd Zullinger]

This should only be needed until the rel-eng adds some explanatory text
directly to the *-CHECKSUM files.  This is planned for F13 (by Oxf13 ;).
---

Thoughts?  Is 'warning' too strong?  I wasn't sure if 'note' would
stand out enough.  Perhaps I'm just grumpy after seeing so much
confusion about this. ;)

I'm also torn about the placement.  It might be better to move up to
the top of the page, above the "Windows user?" note.

 fedoraproject.org/data/content/verify.html |    3 +++
 1 files changed, 3 insertions(+), 0 deletions(-)

diff --git a/fedoraproject.org/data/content/verify.html b/fedoraproject.org/data/content/verify.html
index f763b01..51a2402 100644
--- a/fedoraproject.org/data/content/verify.html
+++ b/fedoraproject.org/data/content/verify.html
@@ -27,6 +27,9 @@
       <li><a href="https://fedoraproject.org/static/checksums/Fedora-12-i686-Live-KDE-CHECKSUM">i386 (KDE)</a></li>
       <li><a href="https://fedoraproject.org/static/checksums/Fedora-12-x86_64-Live-KDE-CHECKSUM">x86_64 (KDE)</a></li>
     </ul>
+    <p class="warning">
+    ${Markup(_('Please note that the <i>Hash: SHA1</i> line in the CHECKSUM file is part of the PGP signature.  It does <b>not</b> specify the type of hash used to verify the .iso files.'))}
+    </p>
     <p>
     ${Markup(_('Next, import Fedora\'s GPG key(s):'))}
     </p>
-- 
1.6.5.2

-- 
Todd        OpenPGP -> KeyID: 0xBEAF0CE3 | URL: www.pobox.com/~tmz/pgp
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Eat drink and be merry, for tomorrow they may make it illegal.