Below is the GPG output from KEYS file in release: $ gpg < KEYS pub 4096R/FA51B6C5 2010-09-21 Richard Hirsch (CODE SIGNING KEY) < [email protected]> sub 4096R/EAED5E0F 2010-09-21 pub 4096R/6FACF917 2010-02-10 Richard Hirsch (CODE SIGNING KEY) < [email protected]> sub 4096R/A0E9E72B 2010-02-10
and MD5 checksum: $ md5sum ./apache-esme-1.2.src.tar.gz 0e63b89d06afe0a0ff93b97cdc66cd93 *./apache-esme-1.2.src.tar.gz 2011/3/4 Vladimir Ivanov <[email protected]> > Do you mean I should check with GPG that output from KEYS file in URL is > identical to the KEYS file inside archive? > > 2011/3/4 Richard Hirsch <[email protected]> > > It would be nice for some one to check if the release synchs with the KEYS >> file >> located in http://people.apache.org/~rhirsch/esme/. >> >> It should be OK but I'd like somebody to check it if possible. >> >> Thanks, >> >> D. >> >> On Fri, Mar 4, 2011 at 8:02 PM, Richard Hirsch <[email protected]> >> wrote: >> > Hi, >> > >> > I have posted our candidate for the 1.2 release for Apache ESME. >> > >> > The candidate can be found at >> > http://people.apache.org/~rhirsch/esme/ >> > >> > See the CHANGES.txt file for details on release contents. >> > >> > The release candidate is a tar archive of the sources in >> > https://svn.apache.org/repos/asf/esme/tags/apache-esme-1.2/ >> > >> > The MD5 checksum of the apache-esme-1.2.src.tar.gz release package is >> > 0E 63 B8 9D 06 AF E0 A0 FF 93 B9 7C DC 66 CD 93 >> > >> > Please vote on releasing this package as Apache ESME 1.2. >> > >> > The vote is open for the next 72 hours and passes if >> > a majority of at least three +1 ESME PPMC votes is reached. >> > >> > [ ] +1 Release this package as Apache ESME 1.2 >> > [ ] -1 Do not release this package because... >> > >> > Here's my +1. >> > >> > Dick >> > Apache ESME Chair >> > >> > > > > -- > Best Regards, > Vladimir Ivanov > -- Best Regards, Vladimir Ivanov
