Hi, Asif, there is a "BAD signature" problem in this RC. ********************************************************************************************** root@cse-dev-cuiyihua:~/Downloads# wget https://dist.apache.org/repos/dist/dev/servicecomb/KEYS --no-check-certificate --2019-10-29 23:38:23-- https://dist.apache.org/repos/dist/dev/servicecomb/KEYS Connecting to 10.67.45.92:3128... connected. WARNING: cannot verify dist.apache.org's certificate, issued by ‘CN=Huawei Web Secure Internet Gateway CA,OU=IT,O=Huawei,L=Shenzhen,ST=GuangDong,C=cn’: Unable to locally verify the issuer's authority. Proxy request sent, awaiting response... 200 OK Length: 12458 (12K) [text/plain] Saving to: ‘KEYS’
KEYS 100%[====================================================>] 12.17K --.-KB/s in 0.04s 2019-10-29 23:38:24 (273 KB/s) - ‘KEYS’ saved [12458/12458] root@cse-dev-cuiyihua:~/Downloads# gpg --import KEYS gpg: /root/.gnupg/trustdb.gpg: trustdb created gpg: key DC93F696BD7A4D69: public key "Mohammad Asif Siddiqui (ServiceComb Code Signing Key) <[email protected]>" imported gpg: key 8E675B0350764CEC: public key "mabin <[email protected]>" imported gpg: key CEEBAF7A248D71CD: public key "xiaoliang tian <[email protected]>" imported gpg: key 402CB0F776A500FA: public key "liubao (CODE SIGNING KEY) <[email protected]>" imported gpg: Total number processed: 4 gpg: imported: 4 root@cse-dev-cuiyihua:~/Downloads# gpg --verify apache-servicecomb-service-center-1.3.0-linux-amd64.tar.gz.asc apache-servicecomb-service-center-1.3.0-linux-amd64.tar.gz gpg: Signature made Sun 27 Oct 2019 05:03:44 PM CST gpg: using RSA key 42C0D7940FCDE5E630E4AAE3DC93F696BD7A4D69 gpg: BAD signature from "Mohammad Asif Siddiqui (ServiceComb Code Signing Key) <[email protected]>" [unknown] On 2019/10/27 09:14:19, Mohammad Asif Siddiqui <[email protected]> wrote: > Hi All, > > This is a call for a Vote to release Apache ServiceComb Service-Center > version 1.3.0 > > Release Notes : > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12321626&version=12345385 > > > Release Candidate : > https://dist.apache.org/repos/dist/dev/servicecomb/servicecomb-service-center/1.3.0 > > > Release Tag : > https://github.com/apache/servicecomb-service-center/releases/tag/1.3.0 > > Release CommitID : c2dc0caef7069ff38cd7395582cf0883d4172dc4 > > Keys to verify the Release Candidate : > https://dist.apache.org/repos/dist/dev/servicecomb/KEYS > > Guide to build the release from source : > https://github.com/apache/servicecomb-service-center/tree/master/scripts/release > > > Voting will start now ( Sunday, 27th October, 2019) and will remain open for > at-least 72 hours, Request all PMC members to give their vote. > > [ ] +1 Release this package as 1.3.0 > [ ] +0 No Opinion > [ ] -1 Do not release this package because.... > > On the behalf of ServiceComb Team > Mohammad Asif Siddiqui >
