Ok, the new signature has been uploaded to https://dist.apache.org/repos/dist/dev/incubator/metron/0.2.0BETA-RC2-incubating/ (same link as in the original announcement, so no change). Sorry for the delay. :)
Best, Casey On Fri, Jul 1, 2016 at 5:28 PM, Casey Stella <[email protected]> wrote: > We are going to re-sign and re-upload and let you know when it's done. > On Fri, Jul 1, 2016 at 16:28 Billie Rinaldi <[email protected]> wrote: > >> Huh, that's weird. When I curl the file it comes out correctly as you've >> said, but if I click on the link and download the file with Firefox it >> comes out binary (the file is slightly larger, too). Chrome also >> downloads >> it correctly. I haven't encountered this issue before, so not sure what's >> going on with Firefox. In any case, the sha and md5 checksums look >> correct. Can you verify that the key used for the signature is 81FD4538 >> and if so, add that to the KEYS file? >> >> On Fri, Jul 1, 2016 at 12:12 PM, Casey Stella <[email protected]> wrote: >> >> > Regarding the SHA, I'm happy to do it another way, but it appears to be >> > non-binary for me when I pull it from the URL: >> > >> > {12:08}[system]~ ➭ curl >> > >> >> > >> https://dist.apache.org/repos/dist/dev/incubator/metron/0.2.0BETA-RC2-incubating/apache-metron-0.2.0BETA-RC2-incubating.tar.gz.sha >> > > >> > > apache-metron-0.2.0BETA-RC2-incubating.tar.gz: >> > > >> > > 0172 824E AC5C 6CCA 71F9 9E8A E35D 95B1 B339 6821 >> > > >> > > >> > Is it supposed to look different? >> > >> > I've added the md5sum. >> > >> > >> > >> > On Fri, Jul 1, 2016 at 11:56 AM, Billie Rinaldi <[email protected]> >> wrote: >> > >> > > The sha file is a binary file, so something went wrong in the >> creation of >> > > this file. This also happened for the last release, so I guess the gpg >> > > command is not working; perhaps you should switch to shasum. There is >> no >> > > md5 checksum file, which is supposed to be present. Also, I could not >> > > verify the asc signature. It says the signature was created with key >> > > 81FD4538, which does not exist in the KEYS file. >> > > >> > > The tarball matches the tag, and I took a quick glance over the >> licenses >> > > and they seemed okay. Disclaimer, filename, build all look good too. >> > > >> > > On Fri, Jun 24, 2016 at 4:19 PM, James Sirota <[email protected]> >> > wrote: >> > > >> > > > his is a call to >> > > > vote on releasing Apache Metron 0.2.0BETA-RC2 incubating >> > > > Full list of changes in this release: >> > > > >> > > > >> > > > >> > > >> > >> https://dist.apache.org/repos/dist/dev/incubator/metron/0.2.0BETA-RC2-incubating/CHANGES >> > > > >> > > > The tag/commit to be voted upon is Metron_0.2.0BETA_rc2: >> > > > >> > > > >> > > > >> > > >> > >> https://git-wip-us.apache.org/repos/asf?p=incubator-metron.git;a=commit;h=5fb4dda0e385ba030455db4c7d1290f872b688ce >> > > > >> > > > The source archive being voted upon can be found here: >> > > > >> > > > >> > > > >> > > >> > >> https://dist.apache.org/repos/dist/dev/incubator/metron/0.2.0BETA-RC2-incubating/apache-metron-0.2.0BETA-RC2-incubating.tar.gz >> > > > >> > > > Other release files, signatures and digests can be found here: >> > > > >> > > > >> > > > >> > > >> > >> https://dist.apache.org/repos/dist/dev/incubator/metron/0.2.0BETA-RC2-incubating >> > > > >> > > > The release artifacts are signed with the following key: >> > > > >> > > > >> > > > >> > > >> > >> https://git-wip-us.apache.org/repos/asf?p=incubator-metron.git;a=blob_plain;f=KEYS;hb=refs/tags/Metron_0.2.0BETA_rc2 >> > > > >> > > > >> > > > Please vote on releasing this package as Apache Metron 0.2.0BETA-RC2 >> > > > incubating >> > > > >> > > > When voting, please list the actions taken to verify the release. >> > > > Recommended build validation and verification instructions are >> posted >> > > here: >> > > > https://cwiki.apache.org/confluence/display/METRON/Verifying+Builds >> > > > >> > > > This vote will be open for at least 72 hours. >> > > > >> > > > [ ] +1 Release this package as Apache Metron 0.2.0BETA-RC2 >> incubating >> > > > [ ] 0 No opinion >> > > > [ ] -1 Do not release this package because... >> > > > >> > > > ------------------- >> > > > Thank you, >> > > > >> > > > James Sirota >> > > > PPMC- Apache Metron (Incubating) >> > > > jsirota AT apache DOT org >> > > > >> > > >> > >> >
