+1 * Built from source tar.gz * Verified checksums and signatures
Kind Regards, Stefan PS: The API and ApacheDS release process mention a "sign.sh" which generates signatures and checksums for distribution packages. Please update the Mavibot release documentation to use that script too. On 08/09/2015 04:55 PM, Kiran Ayyagari wrote: > Hi Stefan, > > On Sun, Aug 9, 2015 at 9:09 PM, Stefan Seelmann <[email protected]> > wrote: > >> Hi Kiran, >> >> The packages are signed with key A591AB7A which is only 2048 bits DSA >> key. According to [1] minimum strength should be 4096 RSA. I'm not sure >> if that is a blocker but please consider to use another key for next >> release. >> >> yes, I realized it very late at the time of closing repo in Nexus, > I will use a different key from the next release. > > >> Please also add your key(s) to our KEYS file [2]. >> >> just added > >> The source and binary packages at >> https://people.apache.org/~kayyagari/mavibot-1.0.0-M8/ miss the md5 and >> sha1 checksum, can you please add them? I hope those are automatically >> generated during the release process? >> > they weren't generated automatically, I have just added them manually. > > All, > > Please let me know if signing with 2048 bit key is not acceptable, I > will regenerate the packages. > > thanks Stefan. > >> >> Kind Regards, >> Stefan >> >> [1] https://www.apache.org/dev/release-signing.html >> [2] https://dist.apache.org/repos/dist/release/directory/KEYS >> >> >> On 08/09/2015 01:54 PM, Kiran Ayyagari wrote: >>> Hello Dev, >>> >>> This is the eighth release of Apache Mavibot, the MVCC BTree in Java ! >>> >>> This release contains complete support for free page management (reusing >>> the copied and unused pages) >>> >>> Please cast your vote ! >>> >>> The revision : >>> >>> http://svn.apache.org/r1694862 >>> >>> The SVN tag: >>> https://svn.apache.org/repos/asf/directory/mavibot/tags/1.0.0-M8/ >>> >>> The source and binary distribution packages: >>> https://people.apache.org/~kayyagari/mavibot-1.0.0-M8/ >>> >>> The staging repository: >>> >> https://repository.apache.org/content/repositories/orgapachedirectory-1040/ >>> >>> Please cast your votes: >>> [ ] +1 Release Mavibot 1.0.0-M8 >>> [ ] 0 abstain >>> [ ] -1 Do not release Mavibot 1.0.0-M8 >>> >> >> > >
