Hi Asif， gpg --verify also fails, the following is the error message, root@chenzhu:~/chan/release# gpg --verify apache-servicecomb-service-center-1.3.0-src.zip.asc apache-servicecomb-service-center-1.3.0-src.zip gpg: Signature made Sun 27 Oct 2019 05:03:20 PM CST using RSA key ID BD7A4D69 gpg: Good signature from "Mohammad Asif Siddiqui (ServiceComb Code Signing Key) <asifdxtr...@apache.org>" gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: 42C0 D794 0FCD E5E6 30E4 AAE3 DC93 F696 BD7A 4D69 root@chenzhu:~/chan/release# gpg --verify apache-servicecomb-service-center-1.3.0-darwin-amd64.tar.gz.asc apache-servicecomb-service-center-1.3.0-darwin-amd64.tar.gz gpg: Signature made Sun 27 Oct 2019 05:04:00 PM CST using RSA key ID BD7A4D69 gpg: BAD signature from "Mohammad Asif Siddiqui (ServiceComb Code Signing Key) <asifdxtr...@apache.org>" root@chenzhu:~/chan/release# gpg --verify apache-servicecomb-service-center-1.3.0-linux-amd64.tar.gz.asc apache-servicecomb-service-center-1.3.0-linux-amd64.tar.gz gpg: Signature made Sun 27 Oct 2019 05:03:44 PM CST using RSA key ID BD7A4D69 gpg: BAD signature from "Mohammad Asif Siddiqui (ServiceComb Code Signing Key) <asifdxtr...@apache.org>" root@chenzhu:~/chan/release# gpg --verify apache-servicecomb-service-center-1.3.0-windows-amd64.tar.gz.asc apache-servicecomb-service-center-1.3.0-windows-amd64.tar.gz gpg: Signature made Sun 27 Oct 2019 05:03:55 PM CST using RSA key ID BD7A4D69 gpg: BAD signature from "Mohammad Asif Siddiqui (ServiceComb Code Signing Key) <asifdxtr...@apache.org>" root@chenzhu:~/chan/release# gpg --list-keys /root/.gnupg/pubring.gpg ------------------------ pub 4096R/BD7A4D69 2018-03-11 uid Mohammad Asif Siddiqui (ServiceComb Code Signing Key) < asifdxtr...@apache.org> sub 4096R/DF1487F5 2018-03-11
pub 4096R/50764CEC 2019-08-23 uid mabin <mabin1...@gmail.com> sub 4096R/973DAB8F 2019-08-23 root@chenzhu:~/chan/release# sha512sum -c apache-servicecomb-service-center-1.3.0-src.zip.sha512 apache-servicecomb-service-center-1.3.0-src.zip: OK root@chenzhu:~/chan/release# sha512sum -c apache-servicecomb-service-center-1.3.0-darwin-amd64.tar.gz.sha512 apache-servicecomb-service-center-1.3.0-darwin-amd64.tar.gz: FAILED sha512sum: WARNING: 1 computed checksum did NOT match root@chenzhu:~/chan/release# sha512sum -c apache-servicecomb-service-center-1.3.0-linux-amd64.tar.gz.sha512 apache-servicecomb-service-center-1.3.0-linux-amd64.tar.gz: FAILED sha512sum: WARNING: 1 computed checksum did NOT match root@chenzhu:~/chan/release# sha512sum -c apache-servicecomb-service-center-1.3.0-windows-amd64.tar.gz.sha512 apache-servicecomb-service-center-1.3.0-windows-amd64.tar.gz: FAILED sha512sum: WARNING: 1 computed checksum did NOT match Wishes & Regards Mohammad Asif Siddiqui <asifdxtr...@apache.org> 于2019年10月27日周日 下午5:14写道： > Hi All, > > This is a call for a Vote to release Apache ServiceComb Service-Center > version 1.3.0 > > Release Notes : > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12321626&version=12345385 > > > Release Candidate : > https://dist.apache.org/repos/dist/dev/servicecomb/servicecomb-service-center/1.3.0 > > > Release Tag : > https://github.com/apache/servicecomb-service-center/releases/tag/1.3.0 > > Release CommitID : c2dc0caef7069ff38cd7395582cf0883d4172dc4 > > Keys to verify the Release Candidate : > https://dist.apache.org/repos/dist/dev/servicecomb/KEYS > > Guide to build the release from source : > https://github.com/apache/servicecomb-service-center/tree/master/scripts/release > > > Voting will start now ( Sunday, 27th October, 2019) and will remain open > for at-least 72 hours, Request all PMC members to give their vote. > > [ ] +1 Release this package as 1.3.0 > [ ] +0 No Opinion > [ ] -1 Do not release this package because.... > > On the behalf of ServiceComb Team > Mohammad Asif Siddiqui >
