I'm on it. Regards, Tim
On 25/08/16 03:33, Suneel Marthi wrote: > On Wed, Aug 24, 2016 at 9:09 PM, Suneel Marthi <[email protected]> > wrote: > >> >> >> On Wed, Aug 24, 2016 at 8:26 PM, Ellison Anne Williams < >> [email protected]> wrote: >> >>> Yes, as per http://www.apache.org/dev/crypto.html -- >>> >>> The code falls under ECCN 5D002, so we are good there. >>> >>> We need to: >>> >>> (1) Notify the USG via the sending the specified email >>> >>> (2) Add a README containing the crypto -- Do we have to go through the >>> entire voting process again internally since we are adding a file to the >>> source release? >>> >> >> I am afraid we do have to rollback and push new set of artifacts. But >> hopefully we don't have to wait for 72 hrs for all to Vote on a README >> file. >> >> It may not have been needed if we had used https://dist.apache.org/ >> repos/dist/dev/incubator/pirk/ - it would then be an svn checkout and svn >> commit. >> >> >>> >>> (3) Edit the export list to add Pirk here >>> http://www.apache.org/licenses/exports/ -- Who (of our PPMC) has access >>> to >>> edit the page? I don't think that I do as it says that anyone with >>> 'site-dev >>> karma' can edit and, as far as I know, I don't have site-dev karma. >>> >> >> I have access and karma to this, if u can tell me what to add - I can do >> it now. >> > > It turns out that I don't have karma to edit this file. > >> >> >>> >>> >>> On Wed, Aug 24, 2016 at 8:15 PM, Suneel Marthi <[email protected]> >>> wrote: >>> >>>> On Wed, Aug 24, 2016 at 8:13 PM, Ellison Anne Williams < >>>> [email protected]> wrote: >>>> >>>>> Got it - will take care of it tonight/in the morning and report back >>> to >>>>> general@incubator >>>>> >>>>> I'd better notify the USG of the crypto - lol :) >>>>> >>>> >>>> That's the part that had me laughing, all of this source code came out >>> of >>>> USG and we are being told to check with USG again. >>>> >>>> At the very least we may need to add Pirk to the list of exports - (4), >>> for >>>> Justin to reverse his -1 >>>> >>>> >>>>> On Wed, Aug 24, 2016 at 8:00 PM, Suneel Marthi < >>> [email protected]> >>>>> wrote: >>>>> >>>>>> Fyi folks >>>>>> >>>>>> >>>>>> ---------- Forwarded message ---------- >>>>>> From: Justin Mclean <[email protected]> >>>>>> Date: Wed, Aug 24, 2016 at 7:48 PM >>>>>> Subject: Re: [VOTE] Apache Pirk 0.1.0-incubating Release >>>>>> To: [email protected] >>>>>> >>>>>> >>>>>> Hi, >>>>>> >>>>>> -1 binding, willing to change my vote if encryption code issue >>>> clarified. >>>>>> >>>>>>> The artifacts can be downloaded here: >>> https://repository.apache.org/ >>>>>> content/ >>>>>>> repositories/orgapachepirk-1002 >>>>>> >>>>>> Please place the artefacts in the correct place [1] That that >>> releases >>>>> MUST >>>>>> be placed in the list area and that maven is considered a secondary >>>>>> channel. >>>>>> >>>>>> I checked: >>>>>> - name included incubating >>>>>> - signature and hashes good >>>>>> - DISCLAIMER exists >>>>>> - LICENSE and NOTICE good >>>>>> - No unexpected binary files in release >>>>>> - Can compile from source >>>>>> >>>>>> I see that the release looks to contains encryption source code [2] >>>>>> (Paillier) [5], if so has this process been followed? [3] I can't >>> see >>>>> Prik >>>>>> listed here [4]. >>>>>> >>>>>> Just out of interest why the “wideskies” in the class path name? >>>>>> >>>>>> Thanks, >>>>>> Justin >>>>>> >>>>>> 1. https://dist.apache.org/repos/dist/dev/incubator/pirk/ >>>>>> 2. ./src/main/java/org/apache/pirk/encryption/ >>>>>> 3. http://www.apache.org/dev/crypto.html >>>>>> 4. http://www.apache.org/licenses/exports/ >>>>>> 5. https://en.wikipedia.org/wiki/Paillier_cryptosystem >>>>>> >>>>>> >>>>>> ------------------------------------------------------------ >>> --------- >>>>>> To unsubscribe, e-mail: [email protected] >>>>>> For additional commands, e-mail: [email protected] >>>>>> >>>>> >>>> >>> >> >> >
