Re: [VOTE] Release Apache APISIX 3.6.1
Hi, gpg --import KEYS I have did this. On Thu, Nov 2, 2023 at 3:17 PM Ashish Tiwari < ashishjaitiwari15112...@gmail.com> wrote: > Hi Zhiyuan, > This error indicatest that the public key wasn't found for verifying the > signature. Did you import the key with gpg --import KEYS after downloading > the KEYS file? I can assure that > https://dist.apache.org/repos/dist/dev/apisix/KEYS does have the latest > public key that can verify the signature. > > On Nov 1 2023, at 1:13 pm, Zhiyuan Ju wrote: > > Hi, > > > > After importing the KEYS file, when I did a verification, it shows that: > > root@ubuntu-s-2vcpu-4gb-amd-sgp1-01:~# gpg --verify > > apache-apisix-3.6.1-src.tgz.asc apache-apisix-3.6.1-src.tgz > > gpg: Signature made Fri Oct 27 09:20:35 2023 UTC > > gpg: using EDDSA key 14C5CA2C51B7B4B15F41AEFF03312933C5C8BFC8 > > gpg: Can't check signature: No public key > > > > I tried this on my previous Mac, and I got the same result. > > Do I miss something? > > > > > > On Tue, Oct 31, 2023 at 11:21 PM fabriceli wrote: > > > +1 (non-binding) > > > > > > I checked： > > > 1. All links are correct. > > > 2. Checksum and signature are correct. > > > 3. Build and Run on my MacBook Pro 2023 M2 successfully. > > > > > > My Best > > > Yihao LI @fabriceli > > > > > > On Tue, Oct 31, 2023 at 5:26 PM Zeping Bai wrote: > > > > > > > +1 (binding) > > > > > > > > I checked： > > > > 1. Download links are OK. > > > > 2. Checksum and signature are OK. > > > > 3. LICENSE and NOTICE files exist. > > > > 4. Building and Running on Gitpod (Ubuntu 22.04) was successful. > > > > > > > > Ashish Tiwari 于2023年10月27日周五 > > > 18:18写道： > > > > > > > > > > > > > > Hello, Community, > > > > > This is a call for the vote to release Apache APISIX version > > > > > Release notes: > > > > > https://github.com/apache/apisix/blob/release/3.6/CHANGELOG.md#361 > > > > > The release candidates: > > > > > https://dist.apache.org/repos/dist/dev/apisix/3.6.1/ > > > > > Release Commit ID: > > > > > https://github.com/apache/apisix/commit/1cc1b196 > > > > > Keys to verify the Release Candidate: > > > > > https://dist.apache.org/repos/dist/dev/apisix/KEYS > > > > > Steps to validating the release: > > > > > 1. Download the release > > > > > wget > > > > > > > > > > > > > https://dist.apache.org/repos/dist/dev/apisix/3.6.1/apache-apisix-3.6.1-src.tgz > > > > > 2. Checksums and signatures > > > > > wget https://dist.apache.org/repos/dist/dev/apisix/KEYS > > > > > wget > > > > > > > > > > > > > https://dist.apache.org/repos/dist/dev/apisix/3.6.1/apache-apisix-3.6.1-src.tgz.asc > > > > > wget > > > > > > > > > > > > > https://dist.apache.org/repos/dist/dev/apisix/3.6.1/apache-apisix-3.6.1-src.tgz.sha512 > > > > > gpg --import KEYS > > > > > shasum -c apache-apisix-3.6.1-src.tgz.sha512 > > > > > gpg --verify apache-apisix-3.6.1-src.tgz.asc > > > apache-apisix-3.6.1-src.tgz > > > > > 3. Unzip and Check files > > > > > tar zxvf apache-apisix-3.6.1-src.tgz > > > > > 4. Build Apache APISIX: > > > > > > > > > > > > > > > > > > https://github.com/apache/apisix/blob/release/3.6/docs/en/latest/building-apisix.md#building-apisix-from-source > > > > > The vote will be open for at least 72 hours or until necessary > number > > > of > > > > > votes are reached. > > > > > > > > > > Please vote accordingly: > > > > > [ ] +1 approve > > > > > [ ] +0 no opinion > > > > > [ ] -1 disapprove with the reason > > > > > > > > > > > > > > > > > -- > > > > Best regards! > > > > Zeping Bai @bzp2010 > > > > > > > > > > >
Re: [VOTE] Release Apache APISIX 3.6.1
Hi Zhiyuan, This error indicatest that the public key wasn't found for verifying the signature. Did you import the key with gpg --import KEYS after downloading the KEYS file? I can assure that https://dist.apache.org/repos/dist/dev/apisix/KEYS does have the latest public key that can verify the signature. On Nov 1 2023, at 1:13 pm, Zhiyuan Ju wrote: > Hi, > > After importing the KEYS file, when I did a verification, it shows that: > root@ubuntu-s-2vcpu-4gb-amd-sgp1-01:~# gpg --verify > apache-apisix-3.6.1-src.tgz.asc apache-apisix-3.6.1-src.tgz > gpg: Signature made Fri Oct 27 09:20:35 2023 UTC > gpg: using EDDSA key 14C5CA2C51B7B4B15F41AEFF03312933C5C8BFC8 > gpg: Can't check signature: No public key > > I tried this on my previous Mac, and I got the same result. > Do I miss something? > > > On Tue, Oct 31, 2023 at 11:21 PM fabriceli wrote: > > +1 (non-binding) > > > > I checked： > > 1. All links are correct. > > 2. Checksum and signature are correct. > > 3. Build and Run on my MacBook Pro 2023 M2 successfully. > > > > My Best > > Yihao LI @fabriceli > > > > On Tue, Oct 31, 2023 at 5:26 PM Zeping Bai wrote: > > > > > +1 (binding) > > > > > > I checked： > > > 1. Download links are OK. > > > 2. Checksum and signature are OK. > > > 3. LICENSE and NOTICE files exist. > > > 4. Building and Running on Gitpod (Ubuntu 22.04) was successful. > > > > > > Ashish Tiwari 于2023年10月27日周五 > > 18:18写道： > > > > > > > > > > > Hello, Community, > > > > This is a call for the vote to release Apache APISIX version > > > > Release notes: > > > > https://github.com/apache/apisix/blob/release/3.6/CHANGELOG.md#361 > > > > The release candidates: > > > > https://dist.apache.org/repos/dist/dev/apisix/3.6.1/ > > > > Release Commit ID: > > > > https://github.com/apache/apisix/commit/1cc1b196 > > > > Keys to verify the Release Candidate: > > > > https://dist.apache.org/repos/dist/dev/apisix/KEYS > > > > Steps to validating the release: > > > > 1. Download the release > > > > wget > > > > > > > > > https://dist.apache.org/repos/dist/dev/apisix/3.6.1/apache-apisix-3.6.1-src.tgz > > > > 2. Checksums and signatures > > > > wget https://dist.apache.org/repos/dist/dev/apisix/KEYS > > > > wget > > > > > > > > > https://dist.apache.org/repos/dist/dev/apisix/3.6.1/apache-apisix-3.6.1-src.tgz.asc > > > > wget > > > > > > > > > https://dist.apache.org/repos/dist/dev/apisix/3.6.1/apache-apisix-3.6.1-src.tgz.sha512 > > > > gpg --import KEYS > > > > shasum -c apache-apisix-3.6.1-src.tgz.sha512 > > > > gpg --verify apache-apisix-3.6.1-src.tgz.asc > > apache-apisix-3.6.1-src.tgz > > > > 3. Unzip and Check files > > > > tar zxvf apache-apisix-3.6.1-src.tgz > > > > 4. Build Apache APISIX: > > > > > > > > > > > > > https://github.com/apache/apisix/blob/release/3.6/docs/en/latest/building-apisix.md#building-apisix-from-source > > > > The vote will be open for at least 72 hours or until necessary number > > of > > > > votes are reached. > > > > > > > > Please vote accordingly: > > > > [ ] +1 approve > > > > [ ] +0 no opinion > > > > [ ] -1 disapprove with the reason > > > > > > > > > > > > > -- > > > Best regards! > > > Zeping Bai @bzp2010 > > > > > >
Re: [VOTE] Release Apache APISIX 3.6.1
Hi, After importing the KEYS file, when I did a verification, it shows that: root@ubuntu-s-2vcpu-4gb-amd-sgp1-01:~# gpg --verify apache-apisix-3.6.1-src.tgz.asc apache-apisix-3.6.1-src.tgz gpg: Signature made Fri Oct 27 09:20:35 2023 UTC gpg:using EDDSA key 14C5CA2C51B7B4B15F41AEFF03312933C5C8BFC8 gpg: Can't check signature: No public key I tried this on my previous Mac, and I got the same result. Do I miss something? On Tue, Oct 31, 2023 at 11:21 PM fabriceli wrote: > +1 (non-binding) > > I checked： > 1. All links are correct. > 2. Checksum and signature are correct. > 3. Build and Run on my MacBook Pro 2023 M2 successfully. > > My Best > Yihao LI @fabriceli > > On Tue, Oct 31, 2023 at 5:26 PM Zeping Bai wrote: > > > +1 (binding) > > > > I checked： > > 1. Download links are OK. > > 2. Checksum and signature are OK. > > 3. LICENSE and NOTICE files exist. > > 4. Building and Running on Gitpod (Ubuntu 22.04) was successful. > > > > Ashish Tiwari 于2023年10月27日周五 > 18:18写道： > > > > > > > > Hello, Community, > > > This is a call for the vote to release Apache APISIX version > > > Release notes: > > > https://github.com/apache/apisix/blob/release/3.6/CHANGELOG.md#361 > > > The release candidates: > > > https://dist.apache.org/repos/dist/dev/apisix/3.6.1/ > > > Release Commit ID: > > > https://github.com/apache/apisix/commit/1cc1b196 > > > Keys to verify the Release Candidate: > > > https://dist.apache.org/repos/dist/dev/apisix/KEYS > > > Steps to validating the release: > > > 1. Download the release > > > wget > > > > > > https://dist.apache.org/repos/dist/dev/apisix/3.6.1/apache-apisix-3.6.1-src.tgz > > > 2. Checksums and signatures > > > wget https://dist.apache.org/repos/dist/dev/apisix/KEYS > > > wget > > > > > > https://dist.apache.org/repos/dist/dev/apisix/3.6.1/apache-apisix-3.6.1-src.tgz.asc > > > wget > > > > > > https://dist.apache.org/repos/dist/dev/apisix/3.6.1/apache-apisix-3.6.1-src.tgz.sha512 > > > gpg --import KEYS > > > shasum -c apache-apisix-3.6.1-src.tgz.sha512 > > > gpg --verify apache-apisix-3.6.1-src.tgz.asc > apache-apisix-3.6.1-src.tgz > > > 3. Unzip and Check files > > > tar zxvf apache-apisix-3.6.1-src.tgz > > > 4. Build Apache APISIX: > > > > > > > > > https://github.com/apache/apisix/blob/release/3.6/docs/en/latest/building-apisix.md#building-apisix-from-source > > > The vote will be open for at least 72 hours or until necessary number > of > > > votes are reached. > > > > > > Please vote accordingly: > > > [ ] +1 approve > > > [ ] +0 no opinion > > > [ ] -1 disapprove with the reason > > > > > > > > > -- > > Best regards! > > Zeping Bai @bzp2010 > > >
Re: [VOTE] Release Apache APISIX 3.6.1
+1 (non-binding) I checked： 1. All links are correct. 2. Checksum and signature are correct. 3. Build and Run on my MacBook Pro 2023 M2 successfully. My Best Yihao LI @fabriceli On Tue, Oct 31, 2023 at 5:26 PM Zeping Bai wrote: > +1 (binding) > > I checked： > 1. Download links are OK. > 2. Checksum and signature are OK. > 3. LICENSE and NOTICE files exist. > 4. Building and Running on Gitpod (Ubuntu 22.04) was successful. > > Ashish Tiwari 于2023年10月27日周五 18:18写道： > > > > > Hello, Community, > > This is a call for the vote to release Apache APISIX version > > Release notes: > > https://github.com/apache/apisix/blob/release/3.6/CHANGELOG.md#361 > > The release candidates: > > https://dist.apache.org/repos/dist/dev/apisix/3.6.1/ > > Release Commit ID: > > https://github.com/apache/apisix/commit/1cc1b196 > > Keys to verify the Release Candidate: > > https://dist.apache.org/repos/dist/dev/apisix/KEYS > > Steps to validating the release: > > 1. Download the release > > wget > > > https://dist.apache.org/repos/dist/dev/apisix/3.6.1/apache-apisix-3.6.1-src.tgz > > 2. Checksums and signatures > > wget https://dist.apache.org/repos/dist/dev/apisix/KEYS > > wget > > > https://dist.apache.org/repos/dist/dev/apisix/3.6.1/apache-apisix-3.6.1-src.tgz.asc > > wget > > > https://dist.apache.org/repos/dist/dev/apisix/3.6.1/apache-apisix-3.6.1-src.tgz.sha512 > > gpg --import KEYS > > shasum -c apache-apisix-3.6.1-src.tgz.sha512 > > gpg --verify apache-apisix-3.6.1-src.tgz.asc apache-apisix-3.6.1-src.tgz > > 3. Unzip and Check files > > tar zxvf apache-apisix-3.6.1-src.tgz > > 4. Build Apache APISIX: > > > > > https://github.com/apache/apisix/blob/release/3.6/docs/en/latest/building-apisix.md#building-apisix-from-source > > The vote will be open for at least 72 hours or until necessary number of > > votes are reached. > > > > Please vote accordingly: > > [ ] +1 approve > > [ ] +0 no opinion > > [ ] -1 disapprove with the reason > > > > > -- > Best regards! > Zeping Bai @bzp2010 >
Re: [VOTE] Release Apache APISIX 3.6.1
+1 (binding) I checked： 1. Download links are OK. 2. Checksum and signature are OK. 3. LICENSE and NOTICE files exist. 4. Building and Running on Gitpod (Ubuntu 22.04) was successful. Ashish Tiwari 于2023年10月27日周五 18:18写道： > > Hello, Community, > This is a call for the vote to release Apache APISIX version > Release notes: > https://github.com/apache/apisix/blob/release/3.6/CHANGELOG.md#361 > The release candidates: > https://dist.apache.org/repos/dist/dev/apisix/3.6.1/ > Release Commit ID: > https://github.com/apache/apisix/commit/1cc1b196 > Keys to verify the Release Candidate: > https://dist.apache.org/repos/dist/dev/apisix/KEYS > Steps to validating the release: > 1. Download the release > wget > https://dist.apache.org/repos/dist/dev/apisix/3.6.1/apache-apisix-3.6.1-src.tgz > 2. Checksums and signatures > wget https://dist.apache.org/repos/dist/dev/apisix/KEYS > wget > https://dist.apache.org/repos/dist/dev/apisix/3.6.1/apache-apisix-3.6.1-src.tgz.asc > wget > https://dist.apache.org/repos/dist/dev/apisix/3.6.1/apache-apisix-3.6.1-src.tgz.sha512 > gpg --import KEYS > shasum -c apache-apisix-3.6.1-src.tgz.sha512 > gpg --verify apache-apisix-3.6.1-src.tgz.asc apache-apisix-3.6.1-src.tgz > 3. Unzip and Check files > tar zxvf apache-apisix-3.6.1-src.tgz > 4. Build Apache APISIX: > > https://github.com/apache/apisix/blob/release/3.6/docs/en/latest/building-apisix.md#building-apisix-from-source > The vote will be open for at least 72 hours or until necessary number of > votes are reached. > > Please vote accordingly: > [ ] +1 approve > [ ] +0 no opinion > [ ] -1 disapprove with the reason > -- Best regards! Zeping Bai @bzp2010
Re: [VOTE] Release Apache APISIX 3.6.1
+1 (binding) I checked： 1. All links are correct. 2. Checksum and signature are correct. 3. Changelog exists. 4. LICENSE and NOTICE files exist. 5. Build and Run on Ubuntu 20.04 successfully. Ashish Tiwari 于2023年10月27日周五 18:20写道： > > > Hello, Community, > This is a call for the vote to release Apache APISIX version > Release notes: > https://github.com/apache/apisix/blob/release/3.6/CHANGELOG.md#361 > The release candidates: > https://dist.apache.org/repos/dist/dev/apisix/3.6.1/ > Release Commit ID: > https://github.com/apache/apisix/commit/1cc1b196 > Keys to verify the Release Candidate: > https://dist.apache.org/repos/dist/dev/apisix/KEYS > Steps to validating the release: > 1. Download the release > wget > https://dist.apache.org/repos/dist/dev/apisix/3.6.1/apache-apisix-3.6.1-src.tgz > 2. Checksums and signatures > wget https://dist.apache.org/repos/dist/dev/apisix/KEYS > wget > https://dist.apache.org/repos/dist/dev/apisix/3.6.1/apache-apisix-3.6.1-src.tgz.asc > wget > https://dist.apache.org/repos/dist/dev/apisix/3.6.1/apache-apisix-3.6.1-src.tgz.sha512 > gpg --import KEYS > shasum -c apache-apisix-3.6.1-src.tgz.sha512 > gpg --verify apache-apisix-3.6.1-src.tgz.asc apache-apisix-3.6.1-src.tgz > 3. Unzip and Check files > tar zxvf apache-apisix-3.6.1-src.tgz > 4. Build Apache APISIX: > https://github.com/apache/apisix/blob/release/3.6/docs/en/latest/building-apisix.md#building-apisix-from-source > The vote will be open for at least 72 hours or until necessary number of > votes are reached. > > Please vote accordingly: > [ ] +1 approve > [ ] +0 no opinion > [ ] -1 disapprove with the reason -- *Shirui Zhao* My GitHub: https://github.com/soulbird
