+1

/tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0-javadoc.jar
gpg:  GOOD
md5 : GOOD (74ba33d337a60fdfbbe368aab5f280b6)
sha1 : GOOD (c4e0d06786a787b4da319f64f185fdb36d096009)
/tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0-source-release.zip
gpg:  GOOD
md5 : GOOD (09d42740d2df286bec1b355ffb53f037)
sha1 : GOOD (29c42940afebb588520dcbe725caafc3210acdad)
/tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0-sources.jar
gpg:  GOOD
md5 : GOOD (4b772ce5eb567cc0c0226785856ff679)
sha1 : GOOD (e9d306f41f500f2f630381a0710d235b7822c52b)
/tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0.jar
gpg:  GOOD
md5 : GOOD (e779f67ffc818e8c8f101563add5708f)
sha1 : GOOD (bdb7ded49e487fccecdf16dd62e334edd6c96fa3)
/tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0.pom
gpg:  GOOD
md5 : GOOD (fbbd9c458c89ed7b8938d7107293027b)
sha1 : GOOD (7b8b20308f34929cee200eee189a08fcf7520eb7)
/tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/maven-metadata.xml
gpg:  ----
md5 : GOOD (731cebc3aa99afa31271a91bcbe89f81)
sha1 : GOOD (b7b4ef2997ed576342b7ff6a2133a0e78631e87d)
################################################################################

and sorry for the noise

regards

antonio

On Nov 25, 2014, at 10:38 AM, Antonio Sanso 
<[email protected]<mailto:[email protected]>> wrote:

thanks Robert,
indeed I suspected was my own issue

gpg --verify 
/tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0-javadoc.jar{.asc,}
gpg: Signature made Mon Nov 24 23:19:19 2014 CET using DSA key ID 134B145C
gpg: Can't check signature: public key not found

On Nov 25, 2014, at 10:19 AM, Robert Munteanu 
<[email protected]<mailto:[email protected]>> wrote:

On Tue, Nov 25, 2014 at 10:58 AM, Antonio Sanso 
<[email protected]<mailto:[email protected]>> wrote:
hi justin,

might be just me but

/tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0-javadoc.jar
gpg:  BAD!!!!!!!!
md5 : GOOD (74ba33d337a60fdfbbe368aab5f280b6)
sha1 : GOOD (c4e0d06786a787b4da319f64f185fdb36d096009)

it looks like there is some issue with the gpg …  :S
It might be worth if other can also test…

For me the GPG check passes.

/tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0-javadoc.jar
gpg:  GOOD
md5 : GOOD (74ba33d337a60fdfbbe368aab5f280b6)
sha1 : GOOD (c4e0d06786a787b4da319f64f185fdb36d096009)

Can you check the result of running

gpg --verify 
/tmp/sling-staging/1153/org/apache/sling/org.apache.sling.resourcemerger/1.2.0/org.apache.sling.resourcemerger-1.2.0-javadoc.jar{.asc,}

?

For me it's

gpg: Signature made Tue 25 Nov 2014 12:19:19 AM EET using DSA key ID 134B145C
gpg: Good signature from "Justin Edelson (CODE SIGNING KEY)
<[email protected]<mailto:[email protected]>>" [unknown]
gpg:                 aka "Justin Edelson 
<[email protected]<mailto:[email protected]>>" [unknown]
gpg:                 aka "Justin Edelson 
<[email protected]<mailto:[email protected]>>" [unknown]
gpg:                 aka "Justin Edelson
<[email protected]<mailto:[email protected]>>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: A04B C4AD 3639 6AD5 A52C  8FE1 87DB F05A 134B 145C

Robert



regards

antonio


On Nov 24, 2014, at 11:36 PM, Justin Edelson 
<[email protected]<mailto:[email protected]><mailto:[email protected]>>
 wrote:

Hi,

We solved 5 issues in this release:
https://issues.apache.org/jira/browse/SLING/fixforversion/12326552

Staging repository:
https://repository.apache.org/content/repositories/orgapachesling-1153/

You can use this UNIX script to download the release and verify the signatures:
http://svn.apache.org/repos/asf/sling/trunk/check_staged_release.sh

Usage:
sh check_staged_release.sh 1153 /tmp/sling-staging

Please vote to approve this release:

[ ] +1 Approve the release
[ ]  0 Don't care
[ ] -1 Don't release, because ...

This majority vote is open for at least 72 hours.




--
Sent from my (old) computer


Reply via email to