Tomaz, I assume you used commit: e71615f8daadeda5d145929fea6f373e3b445ed5
? I did it to verify the releasE: $ gpg --import KEYS gpg: key 42721F00: public key "Paul Querna <[email protected]>" imported gpg: key 337CB7EE: public key "Jerry Chen <[email protected]>" imported gpg: key CE0692F3: "Tomaz Muraus <[email protected]>" not changed gpg: Total number processed: 3 gpg: imported: 2 (RSA: 1) gpg: unchanged: 1 gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model gpg: depth: 0 valid: 2 signed: 1 trust: 0-, 0q, 0n, 0m, 0f, 2u gpg: depth: 1 valid: 1 signed: 0 trust: 1-, 0q, 0n, 0m, 0f, 0u $ gpg --verify apache-libcloud-0.15.0.tar.bz2.asc gpg: Signature made Sun Jun 22 20:28:46 2014 CEST using RSA key ID CE0692F3 gpg: Good signature from "Tomaz Muraus <[email protected]>" gpg: aka "Tomaz Muraus <[email protected]>" gpg: aka "Tomaz Muraus <[email protected]>" $ gpg --print-md MD5 apache-libcloud-0.15.0.tar.bz2 | diff - apache-libcloud-0.15.0.tar.bz2.md5 1c1 < apache-libcloud-0.15.0.tar.bz2: 86 55 EA 98 D1 C4 0B 37 B8 63 61 1A C0 CF EE 3F --- > 8655ea98d1c40b37b863611ac0cfee3f *apache-libcloud-0.15.0.tar.bz2 $ gpg --print-md SHA1 apache-libcloud-0.15.0.tar.bz2 | diff - apache-libcloud-0.15.0.tar.bz2.sha1 1,2c1 < apache-libcloud-0.15.0.tar.bz2: B92F 3DE6 4EF7 54A3 11C0 E023 84A2 C00A 0EF8 < 7848 --- > b92f3de64ef754a311c0e02384a2c00a0ef87848 *apache-libcloud-0.15.0.tar.bz2 $ git clone https://git-wip-us.apache.org/repos/asf/libcloud.git ./git $ mkdir tree $ cd git $ git archive --prefix=../tree/ e71615f8daadeda5d145929fea6f373e3b445ed5 | tar Pxf - $ cd .. $ tar xvfj apache-libcloud-0.15.0.tar.bz2 $ diff -r ./apache-libcloud-0.15.0 ./tree Only in ./tree: .coveragerc Only in ./tree: .gitignore Only in ./tree: .ratignore Only in ./tree: .travis.yml Only in ./tree: CONTRIBUTING.rst Only in ./apache-libcloud-0.15.0: PKG-INFO Only in ./apache-libcloud-0.15.0: apache_libcloud.egg-info Only in ./tree: contrib Only in ./tree: dist Only in ./tree: doap_libcloud.rdf Only in ./tree: docs diff -r ./apache-libcloud-0.15.0/setup.cfg ./tree/setup.cfg 3,8d2 < < [egg_info] < tag_build = < tag_date = 0 < tag_svn_revision = 0 < So it looks to me like some minor difference in the source release. You probably packaged it before tarring and signing ? Maybe that difference does not matter ? On Jun 23, 2014, at 2:20 PM, Jerry Chen <[email protected]> wrote: > [+1] Release Apache Libcloud 0.15.0 > > On Jun 23, 2014, at 2:10 AM, Tomaz Muraus <[email protected]> wrote: > >> All, >> >> It has been almost 5 months since the last release and the trunk has >> accumulated number of changes, so I have decided to roll out a 0.15.0 >> release. >> >> This release contains numerous new features, bug fixes and improvements. >> >> Full change log can be found at >> https://git-wip-us.apache.org/repos/asf?p=libcloud.git;a=blob;f=CHANGES.rst;h=5e2dcca4bc149dcafa841e66c72e10fb8e6920e9;hb=refs/tags/v0.15.0-tentative#l4 >> >> Release artifacts can be found at http://people.apache.org/~tomaz/libcloud/ >> >> Please test the release and post your votes. >> >> +/- 1 >> [ ] Release Apache Libcloud 0.15.0 >> >> Vote will be opened until June 25th, 2014 (or longer, if needed). >> >> Thanks, >> Tomaz >
