+1 binding thanks for updating the key
/tmp/sling-staging/1192/org/apache/sling/org.apache.sling.api/2.9.0/org.apache.sling.api-2.9.0-javadoc.jar gpg: GOOD md5 : GOOD (1e1991b4466bd7aed06970324e4c679a) sha1 : GOOD (c216f6e431e7e069108e2d087c22d56c4875f423) /tmp/sling-staging/1192/org/apache/sling/org.apache.sling.api/2.9.0/org.apache.sling.api-2.9.0-source-release.zip gpg: GOOD md5 : GOOD (bad5f29696c34381dce1105232017eb5) sha1 : GOOD (2b5dc099ddf21f93207267a1786ec3ba819b02c8) /tmp/sling-staging/1192/org/apache/sling/org.apache.sling.api/2.9.0/org.apache.sling.api-2.9.0-sources.jar gpg: GOOD md5 : GOOD (4a65b923382868701f3910720d819586) sha1 : GOOD (c2842068a8d624f3841fe5490e88bcb9f9495f97) /tmp/sling-staging/1192/org/apache/sling/org.apache.sling.api/2.9.0/org.apache.sling.api-2.9.0.jar gpg: GOOD md5 : GOOD (4b4b600a98d0ffee4ceac3946b1c8a1b) sha1 : GOOD (a45fee6b35ee7774621be796b18fa43167b99d87) /tmp/sling-staging/1192/org/apache/sling/org.apache.sling.api/2.9.0/org.apache.sling.api-2.9.0.pom gpg: GOOD md5 : GOOD (a6c0e0af961233303184cef20878826b) sha1 : GOOD (de99d6a3c6834baf7236af1ea4d9c640271de4c7) /tmp/sling-staging/1192/org/apache/sling/org.apache.sling.api/maven-metadata.xml gpg: ---- md5 : GOOD (71c2129d41892fce13f251543635b867) sha1 : GOOD (473afb3257f9fa66c0c61f23970fa5a05f804668) ################################################################################ regards antonio On Feb 20, 2015, at 10:04 AM, Tomek Rękawek <tomasz.reka...@cognifide.com<mailto:tomasz.reka...@cognifide.com>> wrote: Sorry for the duplicate, the previous staging repository was improperly signed (thanks Antonio for pointing this out). Please find the fixed repository details below: [VOTE] Release Apache Sling API version 2.9.0 We solved 7 issues in this release: https://issues.apache.org/jira/browse/SLING/fixforversion/12327958 There are still some outstanding issues: https://issues.apache.org/jira/browse/SLING/component/12311944 Staging repository: https://repository.apache.org/content/repositories/orgapachesling-1192 You can use this UNIX script to download the release and verify the signatures: http://svn.apache.org/repos/asf/sling/trunk/check_staged_release.sh Usage: sh check_staged_release.sh 1192 /tmp/sling-staging Please vote to approve this release: [ ] +1 Approve the release [ ] 0 Don't care [ ] -1 Don't release, because ... This majority vote is open for at least 72 hours. Regards, Tomek On Thu, Feb 19, 2015 at 8:17 PM, Tomek Rękawek <tomasz.reka...@cognifide.com wrote: Hello all, On Thu, Feb 19, 2015 at 4:26 PM, Antonio Sanso <asa...@adobe.com> wrote: hi Tomek, it looks like you did not go through the key creation steps… It's my fault after all. I have a few keys in my GPG keyring and the release process took the first one rather than the one associated with the Apache account. I'll drop the staging repository and create it once more, properly signed this time. Regards, Tomek -- Tomek Rękawek Senior Software Engineer Cognifide Polska Sp. z o.o. skype: trekawek www.cognifide.com -- Tomek Rękawek Senior Software Engineer Cognifide Polska Sp. z o.o. skype: trekawek www.cognifide.com