On Mon, 8 Sep 2008, Jörg Reiher wrote:

Hello,
I've got the following questions regarding the KEYS file and the md5+sha hashes 
for a release:

There is actually a KEYS file located at 
http://people.apache.org/~reiher/Empire-db-incubating/KEYS
Is there something wrong with it or do we have to put it in any other place?

Oops, missed that. Sorry.


I used gpg to generate the MD5 and SHA hashes. The output of gpg differs from 
what would be produced by md5sum, because gpg formats the values with blanks 
between each HEX-String, md5sum doesn't.
Is this a problem? If so, the Apache guideline should take this into account 
(http://www.apache.org/dev/release-signing.html#md5)

I am not sure whether it is a real problem, but in my opinion it is more convenient to have the standard format. And as most people are in a hurry nowadays, convenience is important.

    Regards,

          Thomas
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to