I have now updated the KEYS file. (Unfortunately I have created the key using my business email rather than my apache.org email - does it matter?)
Regards, Rainer > From: Francis De Brabandere [mailto:[email protected]] > To: dev <[email protected]> > Subject: Re: [VOTE] Release Apache Empire-db 2.4.6 (rc2) > > So once the KEYS file is updated this is a +1 from me > > On 10 January 2017 at 15:41, Francis De Brabandere <[email protected]> > wrote: > > > @Jan, you can import the signature from the mit keyserver gpg > > --keyserver pgpkeys.mit.edu --recv-key 0B5DFB51 > > > > @Rainer the KEYS file is still not updated > > https://dist.apache.org/repos/dist/release/empire-db/KEYS > > > > Cheers, > > F > > > > > > > > On 10 January 2017 at 08:39, Jan Glaubitz <[email protected]> wrote: > > > >> Hello Rainer, > >> > >> SHA works now (but: maybe we should use at least SHA256?) > >> > >> I'm still unable to verify the PGP signature. > >> > >> - jan > >> > >> Von meinem iPhone gesendet > >> > >> > Am 10.01.2017 um 08:18 schrieb Rainer Döbele <[email protected]>: > >> > > >> > Hi Jan, > >> > > >> > you are absolutely right: instead of the sha hash the file > >> > contained > >> the md5 hash. > >> > I have corrected it now. > >> > Please check again. > >> > > >> > Regards > >> > Rainer > >> > > >> >> From: [email protected] [mailto:[email protected]] > >> >> To: [email protected] > >> >> Subject: Re: [VOTE] Release Apache Empire-db 2.4.6 (rc2) > >> >> > >> >> Hello Rainer, > >> >> > >> >> how did you create the sha sum? I cant validate its correct: > >> >> > >> >> [jan ~/tmp] sha1 apache-empire-db-2.4.6-dist.zip > >> >> SHA1 (apache-empire-db-2.4.6-dist.zip) = > >> >> 9d0f4e28334561e15458671b7b093b7b3cc5f9cb > >> >> > >> >> yours look a little bit short...? > >> >> > >> >> > >> >> Which key did you use to create the PGP signature? I can't verify > >> >> with > >> they > >> >> KEYS file from the website: > >> >> > >> >> [jan ~/tmp] gpg --verify apache-empire-db-2.4.6-dist.zip.asc > >> >> gpg: Warning: using insecure memory! > >> >> gpg: assuming signed data in 'apache-empire-db-2.4.6-dist.zip' > >> >> gpg: Signature made Mon Jan 9 11:46:48 2017 CET > >> >> gpg: using RSA key 0279D7D50B5DFB51 > >> >> gpg: Can't check signature: No public key > >> >> > >> >> - jan > >> >> > >> >> Zitat von Rainer Döbele <[email protected]>: > >> >> > >> >>> Hi all, > >> >>> > >> >>> Due to an incorrect distribution file I have cancelled rc1 and > >> >>> prepared a second release candidate for version 2.4.6. > >> >>> Please do all check and vote again on this release candidate. > >> >>> > >> >>> A list of all resolved issues for this release can be found here: > >> >>> https://issues.apache.org/jira/browse/EMPIREDB- > >> >> 250?jql=project%20%3D%2 > >> >>> 0EMPIREDB%20AND%20fixVersion%20in%20(empire-db- > >> >> 2.4.6%2C%20empire-db-2. > >> >>> > >> >> > 4.5)%20ORDER%20BY%20due%20ASC%2C%20priority%20DESC%2C%20create > >> >> d%20ASC > >> >>> > >> >>> Maven staging repository: > >> >>> https://repository.apache.org/content/repositories/orgapache > >> empire-db- > >> >>> 1004/ > >> >>> > >> >>> The distribution files are located here: > >> >>> https://dist.apache.org/repos/dist/dev/empire-db/apache-empire- > db > >> >>> -2.4 > >> . > >> >>> 6-rc2/ > >> >>> > >> >>> The Rat report for the tag is available here: > >> >>> https://dist.apache.org/repos/dist/dev/empire-db/apache-empire- > db > >> >>> -2.4 > >> . > >> >>> 6-rc2/rat.txt > >> >>> > >> >>> Vote open for 72 hours. > >> >>> > >> >>> [ ] +1 > >> >>> [ ] +0 > >> >>> [ ] -1 > >> >> > >> >> > >> > > >> > >> > >
