We are going to re-sign and re-upload and let you know when it's done. On Fri, Jul 1, 2016 at 16:28 Billie Rinaldi <[email protected]> wrote:
> Huh, that's weird. When I curl the file it comes out correctly as you've > said, but if I click on the link and download the file with Firefox it > comes out binary (the file is slightly larger, too). Chrome also downloads > it correctly. I haven't encountered this issue before, so not sure what's > going on with Firefox. In any case, the sha and md5 checksums look > correct. Can you verify that the key used for the signature is 81FD4538 > and if so, add that to the KEYS file? > > On Fri, Jul 1, 2016 at 12:12 PM, Casey Stella <[email protected]> wrote: > > > Regarding the SHA, I'm happy to do it another way, but it appears to be > > non-binary for me when I pull it from the URL: > > > > {12:08}[system]~ ➭ curl > > >> > > > https://dist.apache.org/repos/dist/dev/incubator/metron/0.2.0BETA-RC2-incubating/apache-metron-0.2.0BETA-RC2-incubating.tar.gz.sha > > > > > > apache-metron-0.2.0BETA-RC2-incubating.tar.gz: > > > > > > 0172 824E AC5C 6CCA 71F9 9E8A E35D 95B1 B339 6821 > > > > > > > > Is it supposed to look different? > > > > I've added the md5sum. > > > > > > > > On Fri, Jul 1, 2016 at 11:56 AM, Billie Rinaldi <[email protected]> > wrote: > > > > > The sha file is a binary file, so something went wrong in the creation > of > > > this file. This also happened for the last release, so I guess the gpg > > > command is not working; perhaps you should switch to shasum. There is > no > > > md5 checksum file, which is supposed to be present. Also, I could not > > > verify the asc signature. It says the signature was created with key > > > 81FD4538, which does not exist in the KEYS file. > > > > > > The tarball matches the tag, and I took a quick glance over the > licenses > > > and they seemed okay. Disclaimer, filename, build all look good too. > > > > > > On Fri, Jun 24, 2016 at 4:19 PM, James Sirota <[email protected]> > > wrote: > > > > > > > his is a call to > > > > vote on releasing Apache Metron 0.2.0BETA-RC2 incubating > > > > Full list of changes in this release: > > > > > > > > > > > > > > > > > > https://dist.apache.org/repos/dist/dev/incubator/metron/0.2.0BETA-RC2-incubating/CHANGES > > > > > > > > The tag/commit to be voted upon is Metron_0.2.0BETA_rc2: > > > > > > > > > > > > > > > > > > https://git-wip-us.apache.org/repos/asf?p=incubator-metron.git;a=commit;h=5fb4dda0e385ba030455db4c7d1290f872b688ce > > > > > > > > The source archive being voted upon can be found here: > > > > > > > > > > > > > > > > > > https://dist.apache.org/repos/dist/dev/incubator/metron/0.2.0BETA-RC2-incubating/apache-metron-0.2.0BETA-RC2-incubating.tar.gz > > > > > > > > Other release files, signatures and digests can be found here: > > > > > > > > > > > > > > > > > > https://dist.apache.org/repos/dist/dev/incubator/metron/0.2.0BETA-RC2-incubating > > > > > > > > The release artifacts are signed with the following key: > > > > > > > > > > > > > > > > > > https://git-wip-us.apache.org/repos/asf?p=incubator-metron.git;a=blob_plain;f=KEYS;hb=refs/tags/Metron_0.2.0BETA_rc2 > > > > > > > > > > > > Please vote on releasing this package as Apache Metron 0.2.0BETA-RC2 > > > > incubating > > > > > > > > When voting, please list the actions taken to verify the release. > > > > Recommended build validation and verification instructions are posted > > > here: > > > > https://cwiki.apache.org/confluence/display/METRON/Verifying+Builds > > > > > > > > This vote will be open for at least 72 hours. > > > > > > > > [ ] +1 Release this package as Apache Metron 0.2.0BETA-RC2 incubating > > > > [ ] 0 No opinion > > > > [ ] -1 Do not release this package because... > > > > > > > > ------------------- > > > > Thank you, > > > > > > > > James Sirota > > > > PPMC- Apache Metron (Incubating) > > > > jsirota AT apache DOT org > > > > > > > > > >
