Chris, the KEYS file is in svn: http://svn.apache.org/viewvc/incubator/mrunit/dist/KEYS?view=log my past experience (hadoop projects, whirr, etc...) is that that's the proper location for the file, is that not the case?
Also I checked the gpg/md5/sha1 myself and they are valid. I'm not sure why that's not the case for you. I just re-checked it and they are still valid. Can you try downloading using chrome or some browser? ensure your cache is clean? Patrick On Fri, Nov 4, 2011 at 9:40 PM, Mattmann, Chris A (388J) <[email protected]> wrote: > Hi Brock, > > GREAT work. > > Unfortunately I'm -1 to release. See the reasons below: > > My blockers: > - MD5s don't check out > > My would be great to fix: > - KEYS file present on www.apache.org/dist/incubator/mrunit/KEYS > > > 1. Verified signatures, though we don't have a public KEYS file in the Apache > WWW dist > servers and should add one there: > > [chipotle:~/tmp/mrunit-0.5.0] mattmann% curl -O > http://www.apache.org/dist/incubator/mrunit/KEYS > % Total % Received % Xferd Average Speed Time Time Time Current > Dload Upload Total Spent Left Speed > 113 340 113 340 0 0 2571 0 --:--:-- --:--:-- --:--:-- 6800 > [chipotle:~/tmp/mrunit-0.5.0] mattmann% gpg --import KEYS > gpg: no valid OpenPGP data found. > gpg: Total number processed: 0 > [chipotle:~/tmp/mrunit-0.5.0] mattmann% ls > KEYS > mrunit-0.5.0-incubating-dist.tar.gz.md5 mrunit-0.5.0-incubating-dist.zip.asc > mrunit-0.5.0-incubating-dist.tar.gz > mrunit-0.5.0-incubating-dist.tar.gz.sha mrunit-0.5.0-incubating-dist.zip.md5 > mrunit-0.5.0-incubating-dist.tar.gz.asc mrunit-0.5.0-incubating-dist.zip > mrunit-0.5.0-incubating-dist.zip.sha > [chipotle:~/tmp/mrunit-0.5.0] mattmann% more KEYS > <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> > <html><head> > <title>404 Not Found</title> > </head><body> > <h1>Not Found</h1> > <p>The requested URL /dist/incubator/mrunit/KEYS was not found on this > server.</p> > <hr> > <address>Apache/2.3.15-dev (Unix) mod_ssl/2.3.15-dev OpenSSL/1.0.0c Server at > www.apache.org Port 80</address> > </body></html> > [chipotle:~/tmp/mrunit-0.5.0] mattmann% > > So, I grabbed the one out of SVN and it worked fine: > > [chipotle:~/tmp/mrunit-0.5.0] mattmann% curl -O > http://svn.apache.org/repos/asf/incubator/mrunit/dist/KEYS > % Total % Received % Xferd Average Speed Time Time Time Current > Dload Upload Total Spent Left Speed > 101 4174 101 4174 0 0 25153 0 --:--:-- --:--:-- --:--:-- 40921 > [chipotle:~/tmp/mrunit-0.5.0] mattmann% ls > KEYS > mrunit-0.5.0-incubating-dist.tar.gz.md5 mrunit-0.5.0-incubating-dist.zip.asc > mrunit-0.5.0-incubating-dist.tar.gz > mrunit-0.5.0-incubating-dist.tar.gz.sha mrunit-0.5.0-incubating-dist.zip.md5 > mrunit-0.5.0-incubating-dist.tar.gz.asc mrunit-0.5.0-incubating-dist.zip > mrunit-0.5.0-incubating-dist.zip.sha > [chipotle:~/tmp/mrunit-0.5.0] mattmann% gpg --import KEYS > gpg: key 901791C2: public key "Eric Sammer <[email protected]>" imported > gpg: key B4AE10F8: public key "Brock Noland (CODE SIGNING KEY) > <[email protected]>" imported > gpg: Total number processed: 2 > gpg: imported: 2 (RSA: 2) > [chipotle:~/tmp/mrunit-0.5.0] mattmann% > > [chipotle:~/tmp/mrunit-0.5.0] mattmann% gpg --verify > mrunit-0.5.0-incubating-dist.zip.asc > gpg: Signature made Wed Nov 2 19:48:44 2011 PDT using RSA key ID B4AE10F8 > gpg: Good signature from "Brock Noland (CODE SIGNING KEY) <[email protected]>" > gpg: WARNING: This key is not certified with a trusted signature! > gpg: There is no indication that the signature belongs to the owner. > Primary key fingerprint: 92A6 C6BF 1144 FC93 BE7A 8425 5664 2685 B4AE 10F8 > [chipotle:~/tmp/mrunit-0.5.0] mattmann% gpg --verify > mrunit-0.5.0-incubating-dist.tar.gz.asc > gpg: Signature made Wed Nov 2 19:48:43 2011 PDT using RSA key ID B4AE10F8 > gpg: Good signature from "Brock Noland (CODE SIGNING KEY) <[email protected]>" > gpg: WARNING: This key is not certified with a trusted signature! > gpg: There is no indication that the signature belongs to the owner. > Primary key fingerprint: 92A6 C6BF 1144 FC93 BE7A 8425 5664 2685 B4AE 10F8 > [chipotle:~/tmp/mrunit-0.5.0] mattmann% > > 2. MD5 checksum doesn't check out: > > [chipotle:~/tmp/mrunit-0.5.0] mattmann% cat > mrunit-0.5.0-incubating-dist.zip.md5 > e028d9ff0c4ecbd045accf2936f50f04[chipotle:~/tmp/mrunit-0.5.0] mattmann% > openssl md5 mrunit-0.5.0-incubating-dist.zip.md5 > MD5(mrunit-0.5.0-incubating-dist.zip.md5)= 0bd292aff55c1561527cb10b496a1aa3 > [chipotle:~/tmp/mrunit-0.5.0] mattmann% > > [chipotle:~/tmp/mrunit-0.5.0] mattmann% cat > mrunit-0.5.0-incubating-dist.tar.gz.md5 > b69d2389a5c631e1cfefaa687f381eef[chipotle:~/tmp/mrunit-0.5.0] mattmann% > openssl md5 mrunit-0.5.0-incubating-dist.tar.gz.md5 > MD5(mrunit-0.5.0-incubating-dist.tar.gz.md5)= 84227ff89e35f249cefacb335db217ec > [chipotle:~/tmp/mrunit-0.5.0] mattmann% > > 3. SHA checksums DO check out: > > [chipotle:~/tmp/mrunit-0.5.0] mattmann% openssl sha1 > mrunit-0.5.0-incubating-dist.tar.gz > SHA1(mrunit-0.5.0-incubating-dist.tar.gz)= > 989fc3212387ff8b11a42af547007d03a5f91141 > [chipotle:~/tmp/mrunit-0.5.0] mattmann% cat > mrunit-0.5.0-incubating-dist.tar.gz.sha1 > 989fc3212387ff8b11a42af547007d03a5f91141[chipotle:~/tmp/mrunit-0.5.0] > mattmann% > > [chipotle:~/tmp/mrunit-0.5.0] mattmann% openssl sha1 > mrunit-0.5.0-incubating-dist.zip > SHA1(mrunit-0.5.0-incubating-dist.zip)= > 19f2b15b630f27656ae4a4f84af8542f67943c07 > [chipotle:~/tmp/mrunit-0.5.0] mattmann% cat > mrunit-0.5.0-incubating-dist.zip.sha1 > 19f2b15b630f27656ae4a4f84af8542f67943c07[chipotle:~/tmp/mrunit-0.5.0] > mattmann% > > Cheers, > Chris > > > On Nov 3, 2011, at 6:45 PM, Brock Noland wrote: > >> This is the first incubator release for Apache MRUnit, version >> 0.5.0-incubating. >> >> It fixes the following issues: >> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311292&version=12316328 >> >> *** Please download, test and vote by [3 working days after sending]. >> >> Note that we are voting upon the source (tag), binaries are provided >> for convenience. >> >> Source and binary files: >> http://people.apache.org/~brock/mrunit-0.5.0-incubating-candidate-0 >> >> Maven staging repo: >> https://repository.apache.org/content/repositories/orgapachemrunit-149/ >> >> The tag to be voted upon: >> http://svn.apache.org/repos/asf/incubator/mrunit/tags/release-0.5.0-incubating/ >> >> MRUnit's KEYS file containing PGP keys we use to sign the release: >> http://svn.apache.org/repos/asf/incubator/mrunit/dist/KEYS >> >> Note that the Incubator PMC needs to vote upon the release after a >> successful PPMC vote before any release can be made official. > > > ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ > Chris Mattmann, Ph.D. > Senior Computer Scientist > NASA Jet Propulsion Laboratory Pasadena, CA 91109 USA > Office: 171-266B, Mailstop: 171-246 > Email: [email protected] > WWW: http://sunset.usc.edu/~mattmann/ > ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ > Adjunct Assistant Professor, Computer Science Department > University of Southern California, Los Angeles, CA 90089 USA > ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ > >
