Hi Zhiyuan, This error indicatest that the public key wasn't found for verifying the signature. Did you import the key with gpg --import KEYS after downloading the KEYS file? I can assure that https://dist.apache.org/repos/dist/dev/apisix/KEYS does have the latest public key that can verify the signature.
On Nov 1 2023, at 1:13 pm, Zhiyuan Ju <juzhiy...@apache.org> wrote: > Hi, > > After importing the KEYS file, when I did a verification, it shows that: > root@ubuntu-s-2vcpu-4gb-amd-sgp1-01:~# gpg --verify > apache-apisix-3.6.1-src.tgz.asc apache-apisix-3.6.1-src.tgz > gpg: Signature made Fri Oct 27 09:20:35 2023 UTC > gpg: using EDDSA key 14C5CA2C51B7B4B15F41AEFF03312933C5C8BFC8 > gpg: Can't check signature: No public key > > I tried this on my previous Mac, and I got the same result. > Do I miss something? > > > On Tue, Oct 31, 2023 at 11:21 PM fabriceli <fabric...@apache.org> wrote: > > +1 (non-binding) > > > > I checked： > > 1. All links are correct. > > 2. Checksum and signature are correct. > > 3. Build and Run on my MacBook Pro 2023 M2 successfully. > > > > My Best > > Yihao LI @fabriceli > > > > On Tue, Oct 31, 2023 at 5:26 PM Zeping Bai <bzp2...@apache.org> wrote: > > > > > +1 (binding) > > > > > > I checked： > > > 1. Download links are OK. > > > 2. Checksum and signature are OK. > > > 3. LICENSE and NOTICE files exist. > > > 4. Building and Running on Gitpod (Ubuntu 22.04) was successful. > > > > > > Ashish Tiwari <ashishjaitiwari15112...@gmail.com> 于2023年10月27日周五 > > 18:18写道： > > > > > > > > > > > Hello, Community, > > > > This is a call for the vote to release Apache APISIX version > > > > Release notes: > > > > https://github.com/apache/apisix/blob/release/3.6/CHANGELOG.md#361 > > > > The release candidates: > > > > https://dist.apache.org/repos/dist/dev/apisix/3.6.1/ > > > > Release Commit ID: > > > > https://github.com/apache/apisix/commit/1cc1b196 > > > > Keys to verify the Release Candidate: > > > > https://dist.apache.org/repos/dist/dev/apisix/KEYS > > > > Steps to validating the release: > > > > 1. Download the release > > > > wget > > > > > > > > > https://dist.apache.org/repos/dist/dev/apisix/3.6.1/apache-apisix-3.6.1-src.tgz > > > > 2. Checksums and signatures > > > > wget https://dist.apache.org/repos/dist/dev/apisix/KEYS > > > > wget > > > > > > > > > https://dist.apache.org/repos/dist/dev/apisix/3.6.1/apache-apisix-3.6.1-src.tgz.asc > > > > wget > > > > > > > > > https://dist.apache.org/repos/dist/dev/apisix/3.6.1/apache-apisix-3.6.1-src.tgz.sha512 > > > > gpg --import KEYS > > > > shasum -c apache-apisix-3.6.1-src.tgz.sha512 > > > > gpg --verify apache-apisix-3.6.1-src.tgz.asc > > apache-apisix-3.6.1-src.tgz > > > > 3. Unzip and Check files > > > > tar zxvf apache-apisix-3.6.1-src.tgz > > > > 4. Build Apache APISIX: > > > > > > > > > > > > > https://github.com/apache/apisix/blob/release/3.6/docs/en/latest/building-apisix.md#building-apisix-from-source > > > > The vote will be open for at least 72 hours or until necessary number > > of > > > > votes are reached. > > > > > > > > Please vote accordingly: > > > > [ ] +1 approve > > > > [ ] +0 no opinion > > > > [ ] -1 disapprove with the reason > > > > > > > > > > > > > -- > > > Best regards! > > > Zeping Bai @bzp2010 > > > > > >
