PGP key, even. The key also isnt in the KEYS file that exists in the distribution itself. Though that file probably just shouldn't exist - it's confusing and clearly no use for verification from within the archives being verified, and of debatable use from e.g the repo since its just a duplicating subset of the main dist file which is where people are meant to verify from.
I checked things out as follows: - Failed to verify the signature files as previously noted. Will vote once the KEYS file is rectified and it is possible to do so. Note: The 7th/not-yet vote shouldnt be the first one pointing this out, other people should have been verifying this too. - Verified the checksum files. - Checked for LICENCE and NOTICE files present in the archive. - Ran mvn apache-rat:check to verify the source licence headers. - Built against Proton 0.34.0 and ran the tests. - Ran the ProtonJ2 1.0.0 HelloWorld example against installed router. Robbie On Wed, 12 May 2021 at 10:07, Robbie Gemmell <robbie.gemm...@gmail.com> wrote: > > Your GPG public key isnt in the KEYS file [1], or the generated group > [2] or individual [3] sig files files created based on the fingerprint > entries from id.apache.org. > > It must be added to the KEYS file so people can use the sig file to > verify the release download. > > For the other cases, it looks from > https://people.apache.org/keys/committer/ like you do have the key > fingerprint entered, but the process generating the page can't find it > yet. Could be that it isnt on the keyserver(s) it's looking at (where > have you added it?), or the server may not have been reachable when > tried, or maybe the fingerprint isnt entered quite as it wants (seems > ok), etc. > > [1] https://downloads.apache.org/qpid/KEYS (source file at root of our > dist release area) > [2] https://people.apache.org/keys/group/qpid.asc > [3] https://people.apache.org/keys/committer/kgiusti.asc > > On Mon, 10 May 2021 at 17:54, Ken Giusti <kgiu...@apache.org> wrote: > > > > Hello All, > > > > > > Please cast your vote on this thread to release RC1 as the official Qpid > > Dispatch Router version 1.16.0. > > > > > > > > RC1 of Qpid Dispatch Router version 1.16.0 can be found here: > > > > > > > > https://dist.apache.org/repos/dist/dev/qpid/dispatch/1.16.0-rc1/ > > > > > > > > The JIRAs assigned are: > > > > > > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12315321&version=12348780 > > > > > > > > It is tagged as 1.16.0-rc1. > > > > > > > > Thanks --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@qpid.apache.org For additional commands, e-mail: users-h...@qpid.apache.org
