Re: PGP key to sign the 8.6 branch
I signed and sent the updated key to the ubuntu & sks-keyservers servers. Before signing, via other communication channels, I verified that the hexadecimal key ID was authentic. ~ David Smiley Apache Lucene/Solr Search Developer http://www.linkedin.com/in/davidwsmiley On Tue, Jun 30, 2020 at 6:20 AM Bruno Roustant wrote: > I uploaded my key (6AD29C0A) to keyserver.ubuntu.com, pgp.surfnet.nl and > hkps.pool.sks-keyservers.net and it can be retrieved now: > > gpg --verbose --keyserver keyserver.ubuntu.com --recv-keys 6AD29C0A > > gpg: data source: http://162.213.33.9:11371 > > gpg: pub rsa4096/377C3BA26AD29C0A 2020-06-26 Bruno Roustant < > broust...@apache.org> > > gpg: key 377C3BA26AD29C0A: "Bruno Roustant " not > changed > > gpg: Total number processed: 1 > > gpg: unchanged: 1 > > > I still cannot connect to pgp.mit.edu > > Le lun. 29 juin 2020 à 16:52, David Smiley a écrit : > >> I've been trying to get Bruno's key and have had great difficulty. >> I can find his key with the web interface: >> https://pgp.mit.edu/pks/lookup?search=broustant%40apache.org=vindex >> >> But at the CLI I can't find it: >> >> This fails: >> >> gpg --keyserver pgp.mit.edu --search-keys broust...@apache.org >> >> gpg: searching for "broust...@apache.org" from hkp server pgp.mit.edu >> >> gpg: key "broust...@apache.org" not found on keyserver >> >> And so does: >> >> gpg --keyserver pgp.mit.edu -v --recv-keys 0x377C3BA26AD29C0A >> >> gpg: requesting key 6AD29C0A from hkp server pgp.mit.edu >> >> gpg: keyserver timed out >> >> gpg: keyserver receive failed: Keyserver error >> >> ~ David Smiley >> Apache Lucene/Solr Search Developer >> http://www.linkedin.com/in/davidwsmiley >> >> >> On Mon, Jun 29, 2020 at 10:33 AM Robert Muir wrote: >> >>> I have had problems with gpg last few hours too. pgp.mit.edu has been >>> slow/not working even for my own key. >>> But if i use an alternative server it works better. >>> >>> May not help you, as your key (6AD29C0A?) doesn't seem to exist on any >>> of the other servers yet. >>> >>> $ gpg --verbose --keyserver pgp.mit.edu --recv-keys 322D7ECA >>> gpg: keyserver receive failed: No keyserver available >>> $ gpg --verbose --keyserver keyserver.ubuntu.com --recv-keys 322D7ECA >>> gpg: data source: http://162.213.33.9:11371 >>> gpg: key 817AE1DD322D7ECA: number of dropped non-self-signatures: 6 >>> gpg: pub rsa4096/817AE1DD322D7ECA 2009-11-05 Robert Muir (Code Signing >>> Key) >>> gpg: key 817AE1DD322D7ECA: "Robert Muir (Code Signing Key) < >>> rm...@apache.org>" not changed >>> gpg: Total number processed: 1 >>> gpg: unchanged: 1 >>> >>> On Mon, Jun 29, 2020 at 10:09 AM Bruno Roustant < >>> bruno.roust...@gmail.com> wrote: >>> Hi I've been reading the PGP/GPG key part of the ReleaseTodo doc. https://cwiki.apache.org/confluence/display/LUCENE/ReleaseTodo I created a 4K-bit key (with my apache.org email) and I uploaded it to MIT key server pgp.mit.edu last Thursday. But there is a line in the doc that says my key should be signed by another committer. I asked David Smiley but it seems he encounters difficulties to get back my key from the server. Could someone help us to understand the issue? Thanks! Bruno >>>
Re: PGP key to sign the 8.6 branch
I uploaded my key (6AD29C0A) to keyserver.ubuntu.com, pgp.surfnet.nl and hkps.pool.sks-keyservers.net and it can be retrieved now: gpg --verbose --keyserver keyserver.ubuntu.com --recv-keys 6AD29C0A gpg: data source: http://162.213.33.9:11371 gpg: pub rsa4096/377C3BA26AD29C0A 2020-06-26 Bruno Roustant < broust...@apache.org> gpg: key 377C3BA26AD29C0A: "Bruno Roustant " not changed gpg: Total number processed: 1 gpg: unchanged: 1 I still cannot connect to pgp.mit.edu Le lun. 29 juin 2020 à 16:52, David Smiley a écrit : > I've been trying to get Bruno's key and have had great difficulty. > I can find his key with the web interface: > https://pgp.mit.edu/pks/lookup?search=broustant%40apache.org=vindex > > But at the CLI I can't find it: > > This fails: > > gpg --keyserver pgp.mit.edu --search-keys broust...@apache.org > > gpg: searching for "broust...@apache.org" from hkp server pgp.mit.edu > > gpg: key "broust...@apache.org" not found on keyserver > > And so does: > > gpg --keyserver pgp.mit.edu -v --recv-keys 0x377C3BA26AD29C0A > > gpg: requesting key 6AD29C0A from hkp server pgp.mit.edu > > gpg: keyserver timed out > > gpg: keyserver receive failed: Keyserver error > > ~ David Smiley > Apache Lucene/Solr Search Developer > http://www.linkedin.com/in/davidwsmiley > > > On Mon, Jun 29, 2020 at 10:33 AM Robert Muir wrote: > >> I have had problems with gpg last few hours too. pgp.mit.edu has been >> slow/not working even for my own key. >> But if i use an alternative server it works better. >> >> May not help you, as your key (6AD29C0A?) doesn't seem to exist on any of >> the other servers yet. >> >> $ gpg --verbose --keyserver pgp.mit.edu --recv-keys 322D7ECA >> gpg: keyserver receive failed: No keyserver available >> $ gpg --verbose --keyserver keyserver.ubuntu.com --recv-keys 322D7ECA >> gpg: data source: http://162.213.33.9:11371 >> gpg: key 817AE1DD322D7ECA: number of dropped non-self-signatures: 6 >> gpg: pub rsa4096/817AE1DD322D7ECA 2009-11-05 Robert Muir (Code Signing >> Key) >> gpg: key 817AE1DD322D7ECA: "Robert Muir (Code Signing Key) < >> rm...@apache.org>" not changed >> gpg: Total number processed: 1 >> gpg: unchanged: 1 >> >> On Mon, Jun 29, 2020 at 10:09 AM Bruno Roustant >> wrote: >> >>> Hi >>> >>> I've been reading the PGP/GPG key part of the ReleaseTodo doc. >>> https://cwiki.apache.org/confluence/display/LUCENE/ReleaseTodo >>> I created a 4K-bit key (with my apache.org email) and I uploaded it to >>> MIT key server pgp.mit.edu last Thursday. >>> >>> But there is a line in the doc that says my key should be signed by >>> another committer. I asked David Smiley but it seems he encounters >>> difficulties to get back my key from the server. >>> Could someone help us to understand the issue? >>> >>> Thanks! >>> >>> Bruno >>> >>
Re: PGP key to sign the 8.6 branch
I've been trying to get Bruno's key and have had great difficulty. I can find his key with the web interface: https://pgp.mit.edu/pks/lookup?search=broustant%40apache.org=vindex But at the CLI I can't find it: This fails: gpg --keyserver pgp.mit.edu --search-keys broust...@apache.org gpg: searching for "broust...@apache.org" from hkp server pgp.mit.edu gpg: key "broust...@apache.org" not found on keyserver And so does: gpg --keyserver pgp.mit.edu -v --recv-keys 0x377C3BA26AD29C0A gpg: requesting key 6AD29C0A from hkp server pgp.mit.edu gpg: keyserver timed out gpg: keyserver receive failed: Keyserver error ~ David Smiley Apache Lucene/Solr Search Developer http://www.linkedin.com/in/davidwsmiley On Mon, Jun 29, 2020 at 10:33 AM Robert Muir wrote: > I have had problems with gpg last few hours too. pgp.mit.edu has been > slow/not working even for my own key. > But if i use an alternative server it works better. > > May not help you, as your key (6AD29C0A?) doesn't seem to exist on any of > the other servers yet. > > $ gpg --verbose --keyserver pgp.mit.edu --recv-keys 322D7ECA > gpg: keyserver receive failed: No keyserver available > $ gpg --verbose --keyserver keyserver.ubuntu.com --recv-keys 322D7ECA > gpg: data source: http://162.213.33.9:11371 > gpg: key 817AE1DD322D7ECA: number of dropped non-self-signatures: 6 > gpg: pub rsa4096/817AE1DD322D7ECA 2009-11-05 Robert Muir (Code Signing > Key) > gpg: key 817AE1DD322D7ECA: "Robert Muir (Code Signing Key) < > rm...@apache.org>" not changed > gpg: Total number processed: 1 > gpg: unchanged: 1 > > On Mon, Jun 29, 2020 at 10:09 AM Bruno Roustant > wrote: > >> Hi >> >> I've been reading the PGP/GPG key part of the ReleaseTodo doc. >> https://cwiki.apache.org/confluence/display/LUCENE/ReleaseTodo >> I created a 4K-bit key (with my apache.org email) and I uploaded it to >> MIT key server pgp.mit.edu last Thursday. >> >> But there is a line in the doc that says my key should be signed by >> another committer. I asked David Smiley but it seems he encounters >> difficulties to get back my key from the server. >> Could someone help us to understand the issue? >> >> Thanks! >> >> Bruno >> >
Re: PGP key to sign the 8.6 branch
I have had problems with gpg last few hours too. pgp.mit.edu has been slow/not working even for my own key. But if i use an alternative server it works better. May not help you, as your key (6AD29C0A?) doesn't seem to exist on any of the other servers yet. $ gpg --verbose --keyserver pgp.mit.edu --recv-keys 322D7ECA gpg: keyserver receive failed: No keyserver available $ gpg --verbose --keyserver keyserver.ubuntu.com --recv-keys 322D7ECA gpg: data source: http://162.213.33.9:11371 gpg: key 817AE1DD322D7ECA: number of dropped non-self-signatures: 6 gpg: pub rsa4096/817AE1DD322D7ECA 2009-11-05 Robert Muir (Code Signing Key) gpg: key 817AE1DD322D7ECA: "Robert Muir (Code Signing Key) " not changed gpg: Total number processed: 1 gpg: unchanged: 1 On Mon, Jun 29, 2020 at 10:09 AM Bruno Roustant wrote: > Hi > > I've been reading the PGP/GPG key part of the ReleaseTodo doc. > https://cwiki.apache.org/confluence/display/LUCENE/ReleaseTodo > I created a 4K-bit key (with my apache.org email) and I uploaded it to > MIT key server pgp.mit.edu last Thursday. > > But there is a line in the doc that says my key should be signed by > another committer. I asked David Smiley but it seems he encounters > difficulties to get back my key from the server. > Could someone help us to understand the issue? > > Thanks! > > Bruno >
