On Tue, Jul 8, 2008 at 10:58 AM, Emmanuel Lecharny <[EMAIL PROTECTED]> wrote: > I checked, MINA has a KEYS file, on people.apache.org : > > /www/www.apache.org/dist/mina/KEYS
Now, with the KEYS file found, I reran the verification of both the M1 and M2 releases and they both pass just fine. I think we can close this issue as long as Valient could confirm that this is not an issue with the mirror he used. $ wget http://apache.jumper.nu/mina/2.0.0-M1/mina-2.0.0-M1.tar.bz2 --12:58:34-- http://apache.jumper.nu/mina/2.0.0-M1/mina-2.0.0-M1.tar.bz2 => `mina-2.0.0-M1.tar.bz2' Resolving apache.jumper.nu... 80.67.2.2 Connecting to apache.jumper.nu|80.67.2.2|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 2,148,107 (2.0M) [application/x-bzip2] 100%[====================================>] 2,148,107 1.11M/s 12:58:36 (1.11 MB/s) - `mina-2.0.0-M1.tar.bz2' saved [2148107/2148107] $ wget http://www.apache.org/dist/mina/2.0.0-M1/mina-2.0.0-M1.tar.bz2.asc --12:58:43-- http://www.apache.org/dist/mina/2.0.0-M1/mina-2.0.0-M1.tar.bz2.asc => `mina-2.0.0-M1.tar.bz2.asc' Resolving www.apache.org... 192.87.106.226 Connecting to www.apache.org|192.87.106.226|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 189 [text/plain] 100%[====================================>] 189 --.--K/s 12:58:44 (26.33 MB/s) - `mina-2.0.0-M1.tar.bz2.asc' saved [189/189] $ wget http://www.apache.org/dist/mina/KEYS --12:53:21-- http://www.apache.org/dist/mina/KEYS => `KEYS' Resolving www.apache.org... 192.87.106.226 Connecting to www.apache.org|192.87.106.226|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 8,539 (8.3K) [text/plain] 100%[====================================>] 8,539 --.--K/s 12:53:21 (241.55 KB/s) - `KEYS' saved [8539/8539] $ gpg --import KEYS gpg: key 0255ECA6: public key "Trustin Lee (http://gleamynode.net/) <[EMAIL PROTECTED]>" imported gpg: key 3F3E8060: public key "Julien Vermillard (CODE SIGNING KEY) <[EMAIL PROTECTED]>" imported gpg: key 92E29412: "Mike Heath <[EMAIL PROTECTED]>" not changed gpg: Total number processed: 3 gpg: imported: 2 gpg: unchanged: 1 gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model gpg: depth: 0 valid: 1 signed: 25 trust: 0-, 0q, 0n, 0m, 0f, 1u gpg: depth: 1 valid: 25 signed: 1 trust: 25-, 0q, 0n, 0m, 0f, 0u gpg: next trustdb check due at 2008-12-31 $ gpg --verify mina-2.0.0-M1.tar.bz2.asc mina-2.0.0-M1.tar.bz2 gpg: Signature made Tue 19 Feb 2008 06:55:41 PM CET using DSA key ID 92E29412 gpg: Good signature from "Mike Heath <[EMAIL PROTECTED]>" gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: C457 B28D B5D7 7D8A 9596 9126 EA5E B0D2 92E2 9412 /niklas
