On Fri, 9 Mar 2018, Stian Soiland-Reyes wrote:

Date: Fri, 9 Mar 2018 15:52:29 +0100
From: Stian Soiland-Reyes <st...@apache.org>
To: Henk P. Penning <penn...@uu.nl>
Cc: general@incubator.apache.org, priv...@taverna.incubator.apache.org
Subject: Re: [incubator/taverna] bad signatures

Hi Stian,

Thanks to the bot for spotting this, I have updated expiry date for my
PGP subkey 6e50bb68cc1699a6.

  Excellent ; the checker refreshes expired keys (only) daily ;
  so tomorrow the checker should pickup the change.

As for removing "old" releases under
https://dist.apache.org/repos/dist/release/incubator/taverna/source/
all of these are referenced from
https://taverna.incubator.apache.org/download/ as they are different
modules (from different git repos) - is there a way to flag this for
the checker? I have removed taverna-parent-2 though - as -3 is
released.

  Please remember that everything in /dist/ is automatically
  archived in : https://archive.apache.org/dist/

  So you can simply remove older stuff and refer to it
  (for instance on you download pages) with urls pointing into

    https://archive.apache.org/dist/incubator/taverna/source/

  Please mail me (he...@apache.org) if you have any questions, remarks etc.

  Thanks ; groeten,

  HPP

------------------------------------------------------------   _
Henk P. Penning, ICT-beta                 R Uithof MG-403    _/ \_
Faculty of Science, Utrecht University    T +31 30 253 4106 / \_/ \
Leuvenlaan 4, 3584CE Utrecht, NL          F +31 30 253 4553 \_/ \_/
http://www.staff.science.uu.nl/~penni101/ M penn...@uu.nl     \_/

On 9 March 2018 at 14:35, Henk P. Penning <penn...@uu.nl> wrote:
Hi Stian,

  please take a quick look at :

    https://checker.apache.org/projs/incubator.html

  As you can see, you have 2 bad signatures in
  www.apache.org/dist/incubator/taverna/ because today (2018-3-9)
  your key 6e50bb68cc1699a6 expired.
  Key 6e50bb68cc1699a6 is a subkey of key 411063a3a0ffd119.

  Please fix this problem soon :

  -- remove the parent package,
  -- or change the expiration date of the subkey,
  -- or replace the signature file

  Help is here : https://checker.apache.org/doc/README.html#EXPKEYSIG

  Please seriously consider removing releases

    taverna-common-activities-2.1.0-incubating/
    taverna-language-0.15.1-incubating/
    taverna-osgi-0.2.1-incubating/
    taverna-parent-2-incubating/
    taverna-parent-3-incubating/

  ... from /dist/incubator/taverna/source ; branches that
  are not currently "under development" should be
  removed from /dist/ ; see [1].

  Please mail me (he...@apache.org) if you have any questions, remarks etc.

  [1] https://www.apache.org/legal/release-policy.html

  Regards,

  Henk Penning -- apache.org infrastructure ; dist & mirrors

------------------------------------------------------------   _
Henk P. Penning, ICT-beta                 R Uithof MG-403    _/ \_
Faculty of Science, Utrecht University    T +31 30 253 4106 / \_/ \
Leuvenlaan 4, 3584CE Utrecht, NL          F +31 30 253 4553 \_/ \_/
http://www.staff.science.uu.nl/~penni101/ M penn...@uu.nl     \_/

---------- Forwarded message ----------
Date: Fri, 9 Mar 2018 14:20:28 +0100

sigs [6e50bb68cc1699a6] [expired]
incubator/taverna/source/taverna-parent-3-incubating/apache-taverna-parent-3-incubating-source-release.zip.asc
sigs [6e50bb68cc1699a6] [expired]
incubator/taverna/source/taverna-server-3.1.0-incubating/apache-taverna-server-3.1.0-incubating-source-release.zip.asc
GPG : /usr/bin/gpg2 --recv-key --keyserver pgp.surfnet.nl --homedir prod/gpg
6e50bb68cc1699a6 2> /dev/null
sha1:
incubator/taverna/source/taverna-parent-3-incubating/apache-taverna-parent-3-incubating-source-release.zip.asc
sha1:
incubator/taverna/source/taverna-server-3.1.0-incubating/apache-taverna-server-3.1.0-incubating-source-release.zip.asc
sig:
incubator/taverna/source/taverna-parent-3-incubating/apache-taverna-parent-3-incubating-source-release.zip.asc
  EXPKEYSIG 6e50bb68cc1699a6 Stian Soiland-Reyes <st...@apache.org>
sig:
incubator/taverna/source/taverna-server-3.1.0-incubating/apache-taverna-server-3.1.0-incubating-source-release.zip.asc
  EXPKEYSIG 6e50bb68cc1699a6 Stian Soiland-Reyes <st...@apache.org>
***** sums_delete 2



--
Stian Soiland-Reyes
http://orcid.org/0000-0001-9842-9718

---------------------------------------------------------------------
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Reply via email to